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LinuxWorld: The idea of Linux on the desktop is no longer a joke. 
The NYSE plans to expand computer-based trading to become more competitive. 
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THE CHICAGO BOARD OF TRADE BUILDING 


Parking 
Go directly to the trading floor or Board of Trade building offices without 
going outside! Our parking garage offers top natch service. 


* Must pre-orange parking, ne drive ups please. 


The Web site of Pelee sie leeMn MeO Mim lees a0 e- || 
photos of the Preis s underground parking garage. 
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Mine for Terrorists 


IT’s high-alert response 
overlooks corporate sites 


looked by IT and security 
managers who responded 
last week to the Department 
of Homeland Security’s warn- 
ing of a heightened terrorist 
threat against the financial 
services sector. 

Freely available on the 
Web, for example, are 3-D 


BY DAN VERTON 
AND LUCAS MEARIAN 

The widespread availability 

of sensitive information on 
corporate Web sites appears | 
to have been largely over- 


| HOW 





nitiati 





models of the exterior and 
limited portions of the interi- 
or of the Citigroup Inc. head- 
quarters building in Manhat- 
ian — one of the sites specifi- 
cally named in the latest ter- 
ror advisory issued by the 
DHS. Likewise, details of the 
Citigroup building’s history of 
structural design weaknesses, 
including its susceptibility to 
toppling over in high winds, 
the construction of its central 
support column and the fire 
rating of the materials used in 
the building, are readily avail- 
able on the Web. 

A Citigroup spokeswoman 
declined to comment, refer- 
ring the matter to the build- 
ing owner, Boston Proper- 
ties Inc. 

Similarly, the Web site of 
the Chicago Board of Trade 


includes pho- 
ees 


tographs of 
isthe genie out the facility’s 
of the e-bottle? 


underground 
QuickLink 


parking ga- 
© 48675 Online Data, 
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‘Breakthrough’ | 
VoIP Project 
Breaks Down 


BY PATRICK THIBODEAU 

In 2001, The Dow Chemical 
Co. unveiled plans to create a 
voice-over-IP network that 
would also provide data and 
video capabilities. In a chest- 
thumping announcement, 
Dow said its converged net- 
work would be a “break- 
through solution” that would 
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be “setting the standard for 


| other Fortune 100 companies.” 


What a difference three 


| years can make. Lead contrac- 
| tor Electronic Data Systems 

| Corp. is now off the project, 

| replaced last week by IBM, 

| which is being tasked with 


building what Midland, Mich.- 
based Dow expected to be 
substantially completed by 
Dow, page 16 
MORE INSIDE 
Still burdened by N/MCI, EDS strives 


CMG) um ie me 
Cte lela! 


Corporate America Slow to 
Adopt Biometric Technologies 


Growth stalled due to 
cost, interoperability 
and reliability issues 


BY JAIKUMAR VIJAYAN 
Biometric authentication tech- 
nologies, which were expect- 
ed to be widely adopted fol- 


PAGE 33 


Beaten down by budget cuts, IT is at 

risk of being intimidated into an order- 
taking role. But Julia King shows how 
ClOs like Michael H. Hugos (right) of Net- . 
work Services Co. overcameresistance | 
to their brilliant but unsolicited ideas. 


lowing the Sept. ll terrorist 
attacks, are still struggling to 
gain broad acceptance in cor- 


porate America. 


Despite the much-touted 


benefits of technologies such 
| as fingerprint, voice, iris and 
| facial recognition systems, the 


Biometrics, page 45 





ANOTHER EXPERT WEIGHS IN ON THE 
TCO OF WINDOWS AND LINUX. 





“We got to market six months faster, and 
saw 14 percent in cost savings over Linux, 


using Windows Server System” 


— Owen Flynn, Chief Technology Officer 
Equifax Inc. 


Equifax, a leading provider of consumer and commercial credit information, chose 
Windows Server System because it allowed them to deliver new and improved services 
with a 14 percent savings in total cost of ownership. With their new Windows-based 


supercomputer cluster, Equifax is able to manage its database of over six billion data 


components with dramatic increases in performance and efficiency. To get the full case 


study, other case studies, or third-party findings, visit microsoft.com/getth 


Microsoft 


Windows 
Server System 


© 2004 Microsoft Corporation. All rights reserved. Microsoft, Windows, the Windows logo, and Windows Server System are either registered trademarks or trademarks of 
Microsoft Corporation in the United States and/or other countries. The names of actual companies and products mentioned herein may be trademarks of their respective owners. 





The right management should do more than just protect. 
It should also enable. 
eTrust™ Security Management Software 


With eTrust security management software, your information isn’t just safeguarded from internal and external threats. 
We provide authorized customers, partners, and employees with appropriate access that can help your business grow. 


In addition to securing data, eTrust also provides a single view of your security environment, so you can make real-time 


decisions based on comprehensive information. If you're looking for ways to minimize risk while maximizing your 
potential, or to get a white paper, go to ca.com/security. 


Computer Associates® 


2003 Computer Associates International, Inc. (CA). All rights reserved 
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Controlling Content Chaos 

in the Technology section: IT managers like Herman Bau- 
mann of the American Hospital Association (left) are 
feeling increased pressure to carefully track and consoli- 
date their organizations’ key content, and they’re looking 
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Cigna Goes Virtual 


Also in the Technology section: A simple server consolida- 
tion project has grown into much more, as Cigna moves 
aggressively to new operating systems, 64-bit processors 
and nascent “virtualization” software from IBM and 





to content management software for help. Page 25 
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Three HP user groups will 
hold their own conferences 
next year despite the vendor’s 
effort to consolidate. 


Linux on the desktop is no 
longer a laughing matter, say 
some attendees of the Linux- 
World Conference & Expo. 


The Pentagon should adopt 
the private sector’s procure- 
ment practices for its business 
systems, says the GAO. 


SSA upgrades Baan apps 
and converges them with two 
other ERP lines. 


) The NYSE plans to expand its 
use of computer-based trading 
to better compete against all- 
electronic rivals like Nasdaq. 


A British bug hunter says he 
found 34 flaws in Oracle soft- 
ware, but customers defend 

the vendor’s security record. 


Q&A: SCO’s CEO claims his 
company will win its Linux 
legal battle — and the hearts 
and minds of IT managers. 


Unisys supports Linux on 
high-end Intel-based servers. 


+ EDS hopes to reverse its for- 


tunes by adopting an “agile 
enterprise” business strategy. 
But it’s still saddled with the 
troubled N/MCI contract. 


IBM and the Mayo Clinic say 
they’ve developed a way to 
mine information from a data- 
base of patient records and 
use it to fine-tune treatment 
procedures. 


28 Future Watch: User Inter- 
faces: The Next Generation. 
User-interface technologies 
may one day enable a wider 
range of human-computer 
interaction than is possible 
with mice and keyboards. 


30 Security Manager’s Journal: 
Merger Interrupts Sarb-Ox 
Project. An acquisition 
prompts a last-minute securi- 
ty audit but fails to derail 
Sarbanes-Oxley compliance 
efforts at Mathias Thurman’s 
company. 


MANAGEMENT 


33 Show Some Initiative! Beaten 
down by years of cost-cutting 
and dismal business/IT align- 
ment, IT is at risk of being in- 
timidated into an order-taking 
role. But companies need IT 
to take the lead. Learn how. 


35 IT Mentor: Listen! Want to 
build better systems? Former 
IT manager Dick Lefkon says 
the key is to really listen to 
what users have to say. 


36 Q&A: Securing the Corpora- 
tion. Four CSOs discuss Inter- 
net vulnerabilities and back 
doors that can be created 
through outsourced applica- 
tion development, among oth- 
er topics. 


37 Career Watch. Navigating the 
move from a purely technical 
job to the business side of the 
organization; why fewer stu- 
dents are studying computer 
science; and the best and 
worst places to recruit CIOs. 


18 Maryfran Johnson says that 
the “buy vs. build” debate may 
last forever, but “simple and 
inexpensive” are the magic 
words associated with the 
best in-house application 
projects. 


So Much Information, 
So Little Relevance 


WEB SITE MANAGEMENT: Early efforts might 
have come up short, but effective Web site 
personalization implementations are finally 
starting to bear fruit, says ChoiceStream’s 
Steve Johnson. @ QuickLink 48464 


Making Lemonade 

From a Team of 16 Lemons 

iT MANAGEMENT: Project manager Bryan K. 
Beverly assesses a team of 16 misfits and 
tries to come up with the best way to utilize 
each one — even Bad Luck Bob and Incom- 
petent Ernie — to get the job done. 

© QuickLink 48495 


Control Access to Your Network 
SECURITY: Steve Gant, CEO of Trusted 
Network Technologies, provides five tips 
for enforcing access control and improving 
security around critical assets. 


© QuickLink 47271 


Planning a Departmental SAN 
STORAGE: Emuiex’s Mike Kane outlines 
some of the options available for expanding 


storage capacity. @ QuickLink 48490 
Googling for Security Holes 


SECURITY: Malicious hackers can use search 
engines to parse through a Web site’s source 
code and find openings that are vulnerable to 
attack. @ QuickLink 48474 


Michael H. Hugos describes 
six skills that are essential for 
successful project leadership. 
Among other things, he says, 
you need to be decisive, know 
how to communicate and act 
with energy and focus. 


Thornton A. May has found 
that IT leaders don’t know 
much about telecom. It’s time 
for them to do their home- 
work, he says. 


Daniel J. Weitzner is touting 
the transparency revolution in 
the enterprise. As we collect 
ever more information, it’s be- 
coming easier to just keep it 
all than to figure out what to 
delete. 


38 Bart Perkins laments that 
vendor consolidation has 
made objective advice on IT 
strategy a rarity. But he has 
tips on how you can still get it. 


46 Frankly Speaking: Frank 
Hayes thinks we all should 
party like it’s 1969 as the 
Arpanet/Internet turns 35. 


ONLINE 
DEPARTMENTS 


Breaking News 

© QuickLink 21510 
Newsletter 
Subscriptions 

© QuickLink 21430 
Knowledge Centers 

© QuickLink 22570 
The Online Store 

@ QuickLink 22420 
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At Deadline Briefs 
News Briefs 


Company Index 
How to Contact CW 
Shark Tank 


Link box, which is at the top of 
every page on our site. 
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AT DEADLINE 


Microsoft Puts SP2 
Into Manufacturing 


XP Service Pack 2 to manufactur- 


ing on Friday, after postponing the 


move two days earlier to do more 


development work on the security- | 
focused update. SP2’s overall size | 


is 265MB, but Microsoft said the 
average download should be 
about 100MB for XP Professional 


users who have SP1 and are up to | 
| will continue to hold indepen- 
| dent user conferences despite 
| HP’s drive to consolidate the 
| events into a new technology 


date on patches. 


IRS to Cut IT Staff 
At Processing Sites 
The U.S. Internal Revenue Service 
said it plans to cut 218 of the 278 
IT workers at its 10 tax process- 
ing centers by next June. The 
cost-cutting move will affect com- 
puter operators, IT specialists and 
tape library administrators in the 
agency's high-speed printing divi- 
sion. The use of new technology 
has increased the level of auto- 
mation at the processing centers, 
an IRS spokesman said. 


PeopleSoft Wins 
$50M Mexico Deal 


PeopleSoft Inc. said Mexico’s in- 
come tax agency has awarded it 
a contract worth more than $50 
million over two years, the largest 
software and services deal in the 
company’s history. PeopleSoft 
will provide Mexico’s Tax Admin- 
istration Service with its finance 
and CRM software, plus other 
products. PeopleSoft said the 
agency chose it over SAP AG and 
Oracle Corp. 


OA ELROD © TERT AG CRT APT, 


MCI Loses $71M 
In Second Quarter 


MCI Inc. reported a $71 million 
net loss for the second quarter, 
compared with a profit of $8 mil- 
lion in the year-earlier quarter. 
MCI, which emerged from bank- 
ruptcy protection in April, said 
second-quarter revenue totaled 
$5.2 billion. “We’ve made tre- 
mendous progress, but we realize 
we have more work to do,” said 
CEO Michael Capellas. 
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HP User Groups Forge 


Will hold their own events next year 
despite vendor's effort to consolidate 





BY MATT HAMBLEN AND 
PATRICK THIBODEAU 
HREE Hewlett- 
Packard Co. user 
groups confirmed 
last week that they 


conference to be held in Sep- 
tember 2005. 

The three user groups had 
been invited to collaborate 
with HP in the unified event, 
currently being called the HP 
Technology Forum Expo. A 
fourth invited user group, En- 
compass, said last month that 
it will support the new HP 
conference [QuickLink 48350]. 

Last week, Interex, the 


| largest HP user group, with 
100,000 members, said its de- 
| cision to continue to hold its 
| HP World event in 2005 is in 
| the best interests of its mem- 


bership. “We just believe that 


| being fully independent, yet 
| loyal to our vendor of choice, 
| would be best for everyone in- 


volved,” said Denys Beau- 


| chemin, president of Sunny- 
| vale, Calif.-based Interex. 


OpenView Forum Interna- 
tional (OVFI), a group of 
8,000 HP software users, will 
proceed with plans to hold its 
Software Forum conference in 
Denver in June 2005, officials 





said. And ITUG, the former 
Tandem user group, plans to 
continue holding its ITUG 
Summit, next scheduled for 
October in San Jose. 

When the HP plan for a 
new conference surfaced last 
month, some users viewed it 
as a competitive challenge to 


| user group conferences, a ma- 


jor source of their revenue. HP 
said that the idea for a single 
conference was to “coalesce” 
the content of the user group 
events and that it came in re- 
sponse to requests by HP cus- 
tomers for comprehensive in- 


| formation about hardware and 


software technologies. 


Support Questions 
But some user group members 
argued that a conference 


| sponsored by the vendor 
| would be marketing-driven, as 


well as a threat to the groups’ 
independence. HP has provid- 
ed funding to the user group 
conferences, usually through 
sponsorships. It’s unclear 
whether or how HP’s contri- 
bution to those events will 


| change. 


David Parsons, vice presi- 
dent of HP Americas, said HP 
“will continue to support our 
groups” as they hold confer- 
ences. “We've not decided the 
level of support, but clearly 


| there will be some level of 


User Group Funding 


= Conference 


$1 million 


registration fees 


@ Non-HP exhibitor fees 


$500,000 


and sponsorships 


#® HP contribution as sponsor 


Conference fees, 
booth rentals, sponsors, 


$300,000 


Declined 
to provide 
breakout 


advertising, membership fees 


“No data available for Encompass or ITUG 





Ahead With Conferences 


Microsoft Corp. released Windows 


support as we go forward, and 
those relationships [with user 
groups] are key,” Parsons said. 
Parsons said the decision of 
the three user groups to forge 
ahead with their own confer- 
ences will have no bearing on 
HP’s plans for its new technol- 
ogy conference. 
OVFI plans to participate 
in the new HP conference in 
2005 and is unsure how that 
conference will affect its own 
2006 plans for Software Fo- 
rum, said OVFI President Hen- 
ry Wojcik. OVFI “is a little bit 
concerned about our future,” 
he said. “In 2006, the success 
of their 2005 conference dic- 
tates what happens to us.” 
While OVFI and HP “have a 
friendly relationship . .. that 
we'd like to continue,” Wojcik 
said, “our membership likes 
our independence as a group, 
and our openness.” 
Beauchemin said that if 
Interex’s participation in the 
new HP technology event is 
deemed to be worthwhile by 
its members, then Interex will 
be there. “We're open to [in- 
volvement with the new 
event], but our main focus is 
on HP World,” he said. “This is 
an extremely big decision for 
us, to continue our show. We 
took a long time to decide and 


| polled our members.” 


Parsons said the date, loca- 
tion and formal name of HP’s 
new show will be announced 
within three weeks. “The big 


| idea is that there will be a 


deep-dive technical focus on 
products and solutions and 
hands-on labs, with a primary 
focus on technical training [to 
meet the] needs of customers, 
partners and HP employees,” 
he said. 

Parsons said HP doesn’t 
want to appear to be in com- 
petition with the user groups. 
In meetings with them about 
holding a unified conference, 
he said, “I learned there is a 
lot of passion around the inde- 
pendence of these groups.” 


@ 48643 
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independent 
Events Outlast 
Comdex, CeBIT 


HP WORLD organizers are ex- 
pecting a 10% increase in at- 
tendance over last year at their 
conference next week, and 
some other user groups said 
they're seeing attendance in- 
creases at their events as well. 

Unlike the organizers of 
CeBIT America 2005, which 
was canceled last week 
[QuickLink 48591], and this 
year's Comdex, which was 
canceled in June [QuickLink 
47727), the user groups are 
optimistic about the future, 
even though they have seen 
attendance at their events de- 
cline in recent years as a result 
of the economic downturn. 

HP World is expecting more 
than 7,000 people at its Chica- 
go event, said Ronald W. 
Evans, executive director and 
CEO of the Interex user group. 
Evans said he’s convinced that 
focused events are what users 
want and the days of Comdex- 
like trade shows are gone. 

Bob Boyson, president of 
Common, a Chicago-based 
IBM user group, said atten- 
dance at its San Antonio con- 
ference in May was up 10% to 
about 2,300. 

Kenneth Ebbe, president of 
Share Inc., an IBM user group 
that’s holding a conference in 
New York on Aug. 16, said at- 
tendance is holding steady 
from last year, and he expects 
between 2,000 and 2,200 at 
the conference. The Chicago- 
based group turns 50 years 
old next year. 

Ebbe said he's concerned 
that the recently heightened 
terrorist alert may have an im- 
pact on attendance. But he 
said he's committed to New 
York as a conference location, 
noting that many Share mem- 
bers live in that area. 

User groups typically reported 
larger attendance figures in earli- 
er years. HP World had about 
12,000 attendees in 2000, and 
Boyson said there were as many 
as 6,000 at an early 1990s 
Common conference. 

~ Patrick Thibodeau 
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IT Managers Eye Desktop Linux, 
But Migration Challenges Remain 


LinuxWorld attendees weigh potential 
cost savings vs. technology's immaturity 





BY TODD R. WEISS 

SAN FRANCISCO 

The idea of using Linux on 
corporate desktops was a 
laughing matter when the 
open-source operating system 
began infiltrating data centers 
a few years ago. But at last 
week’s LinuxWorld Confer- 
ence & Expo here, many IT 
staffers said their companies 
aren't laughing anymore. 

That doesn’t mean all the 
potential hitches facing desk- 
top Linux migrations have 
been eliminated, according to 
nine attendees and two ana- 
lysts. Nonetheless, IT man- 
agers such as Dan Pritchard 
said they’re eyeing Linux as a 
possible alternative to Win- 
dows on end-user PCs. 

Pritchard, director of IT at 
Foster City, Calif.-based Ente- 
los Inc., said the life sciences 
company likely will move its 
90 users to a desktop release 
of Linux when its Windows 
maintenance contract comes 
up for renewal — provided 
that the open-source software 
works better with Research In 
Motion Ltd.’s BlackBerry mo- 
bile devices at that point than 
it does now. 

“Usually where it all falls 
apart is linking it to [Black- 
Berries],” Pritchard said. But 
he added that the cost savings 
promised by desktop Linux are 
alluring. “It’s the money that 
will get the executives to sign, 
given that Microsoft continues 
to do more and more mainte- 
nance [fee] increases,” he said. 

Burlington Coat Factory 
Warehouse Corp. runs about 
3,000 Linux-based PCs in its 
corporate offices and its 360 
retail stores, said Matt Fahrn- 
er, manager of network ser- 


MORE FROM LINUXWORLD 


Novell's CTO talks about the company's 
integration of SUSE Linux and Ximian into 
its operations: 
QuickLink 48618 
www.computerworld.com 





| vices at the Burlington, N_J.- 


based company. The retailer 


| gives its Linux users Sun Mi- 


crosystems Inc.’s StarOffice 
applications or the OpenOf- 
fice.org software suite instead 
of Office. “Most of what we 
need to do, we can do [with 
those applications],” Fahrner 


| said. “It’s not a handicap.” 


Different Paths 


IT managers at two other 
large companies, who asked 
not to be identified, voiced 
differing expectations about 
the likelihood of deploying 
Linux on their desktops. 

A vice president for IT at a 
grocery store chain said his 


company will start using Linux- | 
| it will announce detailed plans | 


based servers within the next 


three months for a pilot pro- 


| ject involving in-store cus- 


tomer marketing programs. 
But the company isn’t likely to 


| move to Linux on the desktop 
because it gets heavily dis- 
counted, long-term pricing on 


Windows and Office from 


| Microsoft Corp., he added. 


However, a Linux systems 


engineer at a bank with more 


than 100,000 users said that 


| desktop Linux is very much a 
| topic of discussion internally 


because of its promised cost 
savings. “In the banking envi- 
ronment, it’s always about 


money,” he said. The bank 


plans to run a desktop Linux 
pilot project next year. 
Desktop Linux news was 


| sparse at the conference. Nov- 
| ell Inc. showed a demo copy 
| Of anew desktop release of its 


SUSE Linux software and said 





’ 


“a 


I) ABOUT 11,000 PEOPLE packed the halls of LinuxWorld last week. 


| this fall. Hewlett-Packard Co. 
| unveiled a notebook PC that’s 
preloaded with Linux. 

| During a panel discussion, 

| speakers offered suggestions 
for companies contemplating 
migrations to desktop Linux. 
First, there has to be a solid 
reason to make the switch, 

| they said. In addition, needed 
| applications must be available 
| on Linux. Driver support and 
| interoperability with systems 
| that run Windows is also im- 
portant, as is making sure that 
the IT support team is experi- 


HP Exec Calls for Fewer Open-Source Licenses 


SAN FRANCISCO 


The large number of licenses 
that software vendors are using 
to release open-source code is 
becoming a significant issue for 
developers and IT managers, ac- 
cording to Hewlett-Packard Co.'s 
top Linux executive. 

“A lot of people don't realize 
that today there are dozens and 


dozens of open-source licenses,” 


Martin Fink, vice president of 
Linux at HP, said in a speech at 
LinuxWorld. Fink added that he 
had counted a total of 52 differ- 
ent open-source licenses and 
predicted that the number would 
likely increase by the end of the 
conference. 

Open-source licenses are ap- 
proved by the Open Source Initia- 
tive (OSI), a nonprofit company 


that has certified licenses from or- 


ganizations as diverse as NASA, 
MIT and Apple Computer Inc. 

The issue of whether there are 
too many licenses has attracted 
the attention of the OSI board 
and has the potential to become 
a serious topic of discussion, 


said OSI President Eric Ray- 
mond. There is “a strong chance” 
that the organization will become 
more restrictive in the number of 
licenses it certifies, though it has 
not put such a policy in place yet, 
he said in an e-mail interview. 

The majority of OSI-certified 
licenses are used in a very small 
number of open-source projects, 
Raymond added. “All but a dozen 
of these are vanity licenses, usu- 
ally [written] by a corporate legal 
department with too much time 
on its hands [and] used on exact- 
ly one project,” he said. 

But Fink contended that the 


Cee eeereecssceseeseeseseseeese 


& If every- 


one sort of 
opted out of the 
licensing game, 
it would make 
everyone’s life 

a little easier. 
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CHRIS HJELM, CTO, ORBITZ 


number of open-source licenses 
is already out of hand. “There 
really is no value, and there is 
only confusion in having that 
many licenses,” he said. 

To date, HP hasn't seen the 
need to create a new license for 
its own open-source contribu- 
tions, choosing instead to re- 
lease its software under existing 
licenses, Fink said. “] approve 
on average three to five open- 
source projects and contribu- 
tions every single week,” he said, 
directly addressing other vendors 
at the conference. “If | have nev- 
er had to create a new license, | 
hav? a really hard time under- 
standing why you think you do.” 

Any confusion brought on by 
the proliferation of open-source 
licenses is probably a bigger is- 
sue for software vendors than it 
is for IT managers, said Chris 
Hielm, chief technology officer at 
online travel services firm Orbitz 
LLC. Vendors need to ensure that 
the various products they sell 
don't have incompatible licenses, 
Hielm noted. 


enced with Linux, the pan- 
elists said. 

J. Craig Manning, manager 
of IT at Cisco Systems Inc., 
said that one of the biggest 
challenges to its desktop Lin- 


| ux plans is a lack of support 


for applications from indepen- 
dent software vendors. He 
noted that a system Cisco uses 
to track technical support re- 
quests runs well on Windows 
but not as well on Linux. 
“That’s where we're having a 
lot of trouble, with the ISVs,” 
Manning said. @ 48671 


But he added that the expand- 
ing number of licenses does af- 
fect companies such as Chicago- 
based Orbitz, which uses a vari- 
ety of open-source software. “If 
everyone sort of opted out of the 
licensing game, it would make 
everyone's life a little easier,” 
Hielm said 

Orbitz is currently using a tool 
developed by Waltham, Mass.- 
based Black Duck Software Inc 
to audit its internal open-source 
code. The product, called Protex- 
IP, lets IT managers track the 
open-source contributions of their 
software developers and help en- 
sure that their companies comply 
with open-source licensing terms. 
“The promise is that they'll man- 
age this complexity,” Hjelm said. 

For software vendors toying 
with the idea of adding to the 
plethora of open-source licenses, 
Fink offered some final words of 
advice in his speech. “If you're 
out there and you're a vendor 
and you're planning to create a 
new license - stop,” he said 
“Please don't.” 

~- Robert McMillan, 
IDG News Service 
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Microsoft CRM Will 
Need Fixes for SP2 


Microsoft Corp. released patches 
to help ensure that its CRM appli- 
cations will work correctly with 
Windows XP Service Pack 2. The 
patches are for Version 1.2 of the 
Microsoft CRM server and the 
Outlook client version of the ven- 
dor’s sales force automation soft- 
ware. But manual work-arounds 
will be needed to address some 
issues between SP2 and the CRM 
tools, Microsoft said. It added that 
Microsoft CRM Version 1.0 won't 
work with SP2 at all. 


Sun Builds Linux 
Code Into Solaris 


Sun Microsystems Inc. is develop- 
ing software called Janus that’s 
designed to make it easier for 
users to run Linux applications on 
Solaris systems built around x86 
processors. The new code wil! run 
inside the Solaris kernel and sup- 
port applications written for Red 
Hat Inc.’s version of Linux, Sun 
said. Janus is due to be included 
in Solaris 10, which is scheduled 
for release by year’s end. 


SEC May Charge 
Business Objects 


Business Objects SA said it was 
notified that the U.S. Securities 
and Exchange Commission’s staff 
plans to recommend a civil action 
against the business intelligence 
software vendor for allegedly vio- 
lating securities laws. The SEC is 
investigating the Paris-based 
company’s policies for reporting 
its backlog of unshipped orders, 
Business Objects said. It vowed to 
“vigorously” defend itself. 


Short Takes 


IBM was tapped by the U.S. Army 
to build a clustered supercomput- 
er that will run SUSE Linux and 
include more than 2,300 Opteron 
processors. . . . City officials in 
MUNICH have put a planned desk- 
top Linux migration on hold due to 
concerns about conflicts with 
more than 50 software patents. 





Pentagon Urged to Fix 
Procurement Processes 


GAO says Defense Department should 


copy corporate IT on business systems 


BY MARC L. SONGINI 
HE U.S. Government 
Accountability Of- 
fice (GAO) has is- 
sued a call for the 
Department of Defense to re- 
form its business system pro- 
curement policies and align 
them with corporate project 
management practices. 

In a report that was sent to 
Congress on July 30, the GAO 
made 14 recommendations 
aimed at strengthening the 


Pentagon’s acquisition policies | 


for business systems as well as 
its controls for ensuring that 


| proper procedures are fol- 


lowed. The GAO warned that 
if its recommendations aren’t 
heeded, future IT investments 


by the DOD will be put at risk. 


And the financial conse- 


| quences could be huge, the 


GAO claimed. Of the $28 bil- 


| lion in IT funding that the 


Pentagon requested for the 
government’s current fiscal 
year, $19 billion will go toward 
operations, maintenance and 
modernization of business 
systems as opposed to military 
command-and-control sys- 
tems, according to the GAO. 

The GAO, then called the 
General Accounting Office, 
was asked late last year by the 
U.S. Senate’s subcommittee on 
military readiness and man- 
agement support to evaluate 
the Pentagon’s latest procure- 
ment guidelines to see if they 
were consistent with private- 
sector best practices and in- 
cluded sufficient controls on 
DOD units. 

The GAO report said recent 
revisions by the DOD do in- 
corporate many procedures 
followed by corporate users, 
such as the need to economi- 
cally justify systems invest- 
ments and to continually mea- 
sure projects against financial 
baselines. But it added that the 
Pentagon left out other best 


| practices, most notably ones 
related to rollouts of packaged 
applications. 

DOD officials told the GAO 
that more best practices will 
be added by Sept. 30 to the 
procurement guidelines, 
which are officially called the 
5000 series of documents. But 
there are no documented 
plans for doing so, the GAO 
said, and the required person- 
nel haven't been assigned yet 
“due to higher-priority needs.” 

Among the recommenda- 
tions made by the GAO is a 
suggestion that the DOD cre- 
ate a formal plan to incorpo- 
rate missing best practices. 
The report also calls for the 
Pentagon to discourage modi- 





fication of third-party applica- 
tions and develop plans to 
evaluate systems integrators 
based on their ability to install 
commercial applications. 
Another hole involves risk 
management processes for 
identifying potential problems 


_ Until these miss- 
ing best prac- 
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and creating plans for dealing 
with them, the GAO said. 
Without such oversight capa- 
bilities, it’s “likely that acquisi- 
tion risks will become cost, 
schedule and performance 
problems,” the GAO said. 

The DOD didn’t respond to 
requests for comment on the 
report by Computerworld’s 
publication deadline. In a let- 
ter to the GAO that was in- 
cluded in the report, the Pen- 
tagon said it agreed with some 
of the recommendations. But 
it disagreed or only partially 
concurred with others. 

For example, the GAO’s call 
for a detailed plan for beefing 
up the business system poli- 
cies is unnecessary and “inap- 
propriate,” the DOD said in its 
letter, which was signed by 
Deputy Assistant Secretary of 
Defense John R. Landon. 

Landon also said that the 
Pentagon doesn’t see the need 
to incorporate risk manage- 
ment processes into the IT 
procurement guidelines be- 
cause it already has sufficient 
processes in place. @ 48635 





BY MARC L. SONGINI 
After a delay of nearly a year, 
SSA Global Technologies Inc. 
last week released a Web- 
based upgrade of its Baan ERP 
applications and said it also 
plans to offer the software as a 
migration platform for users 
that run two of its other man- 
ufacturing application suites. 

Chicago-based SSA said the 
new SSA ERP LN 6.1 software 
was designed to cater to all of 
its discrete manufacturing 
customers, including Baan’s 
installed base and users of the 
company’s ManMan/HP and 
MK product lines. 

The LN suite is the first of 
two new offerings SSA is de- 
veloping to converge the vari- 
ous ERP applications it has 
acquired over the past three 
years. Early next year, the ven- 
dor plans to add SSA ERP LX, 
which will be aimed at users 
of its BPCS, PRMS, Prism and 
Infinium MM/PR applications 








SSA Mixes Baan Apps, 
Two Other ERP Lines 


for process manufacturers. 

SSA ERP LN 6.1 includes a 
Web-based user interface and 
incorporates Web services 
technologies that were devel- 
oped by the former Baan NV, 
which became a subsidiary of 
SSA in July 2003. 

As of last September, Baan 
had spent about $100 million 
developing the next genera- 
tion of its software, code- 
named Gemini, which was due 
for release that month. But 
SSA put shipments on hold 
because of shortcomings that 
included a lack of integration 
with Baan’s CRM and logistics 
applications [QuickLink 41699]. 

In addition, SSA officials 
wanted to consolidate similar 
applications into unified offer- 
ings [QuickLink 41671]. They 
eventually decided to combine 
Gemini and the converged dis- 
crete manufacturing software 
into a single release, said Cory 
Eaves, vice president of solu- 





| tions management and re- 


search at SSA. 

Eaves added that SSA is also 
readying migration tool kits to 
help Baan, ManMan/HP and 
MK users automate tasks dur- 
ing upgrades to SSA ERP LN. 

SSA's convergence moves 
are welcome news for Marsha 
Williams, vice president of IT 
at Sorin Group, a Milan, Italy- 
based medical products con- 
glomerate. “As users of BPCS, 
we are eagerly awaiting the 
convergence of the LN and LX 
platforms, which will truly 
create a best-in-class offering,” 
Williams said via e-mail. 

The new release shows that 
SSA wants to be more than a 
graveyard for its ERP acquisi- 
tions, said John Moore, an ana- 
lyst at ARC Advisory Group 
Inc. Moore said the migration 
paths SSA is offering should 
breathe “new life into what 
were a series of increasingly 
moribund solutions.” @ 48659 
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NYSE to Up 


Expand E- 


Plans IT changes to support accelerated 
shift from manual transaction processes 


BY LUCAS MEARIAN 
HE NEW YORK Stock 
Exchange last week 
announced a plan to 
expand its use of 
computer-based trading in an 
attempt to better compete 
against all-electronic rivals like 
Nasdaq Stock Market Inc. and 
Archipelago Holdings LLC. 
The NYSE filed a request 
with the U.S. Securities and 
Exchange Commission seek- 
ing approval for the proposed 


change to its operations, which 


would shift more transactions 
away from the manual auction 
system that now dominates 
the exchange’s trading floor. 
3ut the NYSE said that the 
expansion of its 3-year-old 
NYSE Direct+ order execution 
system likely won’t start to 
be phased in for another 12 


sone or so. In addition 
to waiting for regulatory 


| approval from the SEC, the 
| exchange noted, its IT staff 


needs to modify the order- 
routing software within the 
Direct+ system 

Analysts who follow IT is- 


| sues in the financial services 

| industry said they think the 

| NYSE will also have to add 

| more systems and increase its 
| network bandwidth to keep up 
| with the expected increase in 


The New York 
Stock Ex- 


_ change is bringing 


its trading system 
into the modern era. 


rade, 
-trading 


electronic trading volumes. 
Direct+ offers subsecond 


| trade-processing speeds, said 


NYSE spokesman Raymond 


| Pellecchia. In comparison, it 


takes an average of about 14 
seconds to complete trades via 
the exchange’s manual ap- 
proach, in which so-called 


| floor traders take stock order 
| tickets that are given to spe- 


cialists and then typed into 
the exchange’s systems by an- 
other floor trader. 

Currently, though, only 


| about 10% of the NYSE’s daily 
| trading volume is executed 
| electronically through Direct+, 


according to Pellecchia. In ad- 


dition, individual trades are 


limited to 1,099 shares at a 


| time. Pellecchia declined to 


say how much of the trading 


| volume is expected to shift to 
| Direct+ after the system ex- 
| pansion work is completed. 


The price of upgrading the 





yi Peas Tc mnd MeV 
less involvement with transactions 
as the NYSE expands its 
Co tectellilemesterls) (cm 


Direct+ system “is not some- 
thing we’ve costed out yet,” he 
added. “But it won’t be an ob- 
stacle ... to doing it.” 

Along with making modifi- 
cations to the Direct+ software 
to allow an unlimited volume 
of stocks to be traded elec- 


| tronically, the NYSE plans to 


give its floor traders new 
handheld computers that they 
will be able to use to enter or- 
ders directly into the system. 
Nasdaq spokesman Wayne 
Lee said officials at the New 


British Bug Hunter Finds 34 Flaws in Oracle Apps 


BY JAIKUMAR VIJAYAN 
Oracle Corp.’s ongoing effort 
to portray itself as a vendor of 
“unbreakable” technology re- 
ceived a setback last week 
when a British bug hunter dis- 
closed that he had found 34 
security vulnerabilities in the 
database vendor’s products. 
The flaws include several 
that could allow malicious at- 
tackers to gain complete ad- 
ministrative control of com- 
promised database servers, 
claimed David Litchfield, 
managing director of Surrey, 
England-based Next Genera- 
tion Security Software Ltd. 
“They include buffer over- 
flows, SQL injection issues 
and a whole range of other mi- 
nor issues,” said Litchfield. He 
said that he reported them to 
Oracle in January and Febru- 
ary following his discovery. 
“Some of them can be ex- 


ploited without a user ID and 
password, while others re- 
quire them,” Litchfield said. 
He refused to provide further 


| details of the flaws, citing his 
concern that doing so before 


| about any flaws,” 


patches are distributed could 
pose a security risk for users. 

Some users defended Ora- 
cle’s security record. 

“I’m always very concerned 
said Howard 
Muffler, director of enterprise 
services at Embry-Riddle 
Aeronautical University in 
Daytona Beach, Fla. But the 


university, which licenses a 


wide range of Oracle prod- 
ucts, has had few security is- 
sues with them so far, Muffler 
said. “Oracle has always done 


| avery good job of addressing 


security flaws and addressing 


| them swiftly,” he said. 


Oracle is “incredibly quick 


| to respond to any security is- 


sue,” agreed Rich Niemiec, 
former president of the Inter- 
national Oracle Users Group 


| and CEO of TUSC, a Chicago- 


based consultancy. “There will 


| always be issues that arise, 
| given the complexity of the 


| SpringFlaws ff 


Previous flaws in Oracle 
products include: 


JUNE 2004 
Unauthorized access vulnerabili- 
ties in Oracle E-Business Suite 


JUNE 2004 
Security vulnerability in Oracle9i 
Application and Database Servers 


Se eccesesceceseeeseseeseese 


MAY 2004 
Security vulnerabilities in Oracle9i 
Database Server 


Pee eoeeeeececeseseosecosees 


APRIL 2004 
Security vulnerabilities in Oracle 
Application Server Web Cache 





software,” but Oracle has been 
diligent in finding and fixing 
them, he said. 

According to Litchfield, Ora- 
cle told him that patches were 
available to fix the problems a 
few months ago. But the com- 
pany appears to be waiting for 
an updated patching process 
to become ready before re- 
leasing the fixes, he said. 

“It is my opinion that they 
could have run the old patch- 
ing process up until the time 
that the new patching proce- 
dure was ready. There really is 
no point in exposing users to 
unnecessary risks,” he said. 

Oracle last week confirmed 
the existence of the flaws but 
refused to provide any further 
details. A company spokes- 
woman said Oracle had fixed 
the flaws and would issue a 
security alert “soon.” 

“Security is a matter we take 





York-based stock market don’t 
see the NYSE’s initiative as 
something that will put Nas- 
daq at a competitive disadvan- 
tage. “We just simply think the 
New York Stock Exchange is 
bringing its trading system 
into the modern era,” Lee said. 

Robert Haggerty, an analyst 
at TowerGroup in Needham, 
Mass., said investors have 
been pushing the NYSE for 
years to remove its volume 
caps on electronic trades. But 
the tradition of writing out 
trade tickets has been hard to 
overcome, he added. 

“The other reason there was 
so much resistance is that it 
does take away the floor bro- 
ker’s ability to interact with 
the orders and thereby make 
money off those transactions,” 
Haggerty said. But now the 
NYSE is “taking a run at Nas- 
dagq,” he said. “It’s a dogfight.” 

NYSE CEO John Thain said 
the exchange will continue to 
offer trades via floor brokers 
because they add a “human 
judgment” to the process. But, 
he noted, NYSE officials “are 


| seeking to upgrade signifi- 
| cantly our use of technology 


to execute securities transac- 


tions.” @ 48654 


| seriously at Oracle, and while 


we stand firmly behind the in- 
herent security of our prod- 
ucts, we are always working to 
do better,” she said. 

News of the latest flaws 
came about two months after 
Oracle warned users of a 
major flaw in its Oracle lli 
E-Business Suite and Oracle 


| Applications 11.0 that could let 


attackers take control of the 
underlying database. 
Even so, Oracle’s database is 


| by “leaps and bounds” more 


secure than competing prod- 
ucts, said Don Burleson, presi- 
dent of Burleson Consulting in 
Kittrell, N.C., and author of 
several books on the security 
of Oracle products. He said 
the newly disclosed flaws are 
unlikely to pose an immediate 
threat. “Litchfield has made it 
his life’s mission to find flaws 
in Oracle’s technology,” Burle- 
son said, adding that most of 
the flaws are obscure and not 


easy to find. @ 48664 
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(i McBride Vows SCO 


SAP Expands Its 
Workforce in India 


SAP AG announced plans to in- 
crease the number of software 
developers at its facility in Banga- 
lore, India, to about 1,500 by 
year’s end and to 3,000 by the 
end of 2006. The SAP Labs India 
facility now has about 1,100 em- 
ployees. CEO Henning Kagermann 
said SAP also plans to team with 
unidentified Indian IT firms to of- 
fer software services in an effort | 
to lower costs for its users. 


| BY TODD R. WEISS 


LAS VEGAS 


Apple CEO Jobs 
Has Cancer Surgery | 


Apple Computer Inc. CEO Steve 
Jobs said in an e-mail message to 
employees that he had a cancer- 
ous tumor removed from his pan- 
creas. The cancer was “a very 
rare form” that won't require 
chemotherapy or radiation treat- 
ments, Jobs wrote, adding that 
he plans to return to work next 
month. Timothy Cook, who heads 
sales at Apple, will run day-to-day 
operations in Jobs’ absence. 


AOL Certifies Tools 
For Corporate IM 


America Online Inc. said it has 
certified integration tool kits from 
three vendors for building its in- 
stant messaging technology into 
corporate applications. AOL said 
in February that it was working 
with IMlogic Inc. and since then 
has teamed up with FaceTime 
Communications Inc. and Akonix 
Inc. The move follows AOL’s re- 
cent decision to drop its IM gate- 
way software [QuickLink 47684]. 


Short Takes 


COMPUTER ASSOCIATES INTER- 
NATIONAL INC. released its Ingres 
database under an open-source 
license and said the next version 
is due by Sept. 30... . The FED- 
ERAL COMMUNICATIONS COMMIS- 
SION voted to examine the poli- 
cies needed to ensure that voice- 
over-IP service providers comply 
with wiretapping rules. 


_ CEO says no plans 
| for more lawsuits 


| HEN The SCO 


Group Inc. held 
its SCO Forum 
2004 user con- 
ference here last week, 
much of the focus re- 
mained on the Unix 
software vendor’s legal 
battles against IBM and 
other Linux backers. 
Darl McBride, president 
and CEO of Lindon, 
Utah-based SCO, 
struck a defiant tone 


during his keynote and 


in a subsequent interview 
with Computerworld, saying 
that he expects his company 
to eventually prevail in court 
and win over many of its crit- 
ics. Excerpts from the inter- 
view follow. 


you believe the IT community will 


| “embrace” SCO’s legal position 


after all the evidence in the IBM 
case is made public. But IT man- 


| agers in general have reacted 


negatively since you sued IBM. 
Why do you think their view will 
change? I think that what will 


| happen here is when the truth 


is on the table and peo- 
ple really understand 
what happened in the 
case, there will be a big 
swing in the public per- 
ception about this 
small company that got 
clobbered by this big 
bully. I’m going a year 
out and saying that be- 
tween now and then, 
when the truth gets out in the 


public filings and people know | 


what we know, people are go- 
ing to view us in a much more 
positive light. 


Despite the pending cases against 


Unisys Offers Linux on 
High-End Intel Servers 


| BY PETER SAYER 
Unisys Corp. is now support- 
ing Linux on its ES7000 series 


announced last week. 

Blue Bell, Pa.-based Unisys 
| already offered Linux on two- 
or four-way servers based on 
Intel microprocessors and is 

now adding support for Linux 
on a range of multiprocessor 

| machines containing up to 32 
Intel 32- or 64-bit processors, 
it said. 

Unisys will offer two distri- 

| butions of Linux on its ES7000 
servers: SUSE, from Novell 
Inc., and Red Hat, from Red 
Hat Inc. SUSE Linux will run 

| on up to 32 processors, and 

| Red Hat Linux on up to 16, ac- 

cording to Steve Rawsthorn, 
Unisys’ vice president of sales 





and marketing for systems and 
technology in Europe, the Mid- 


| dle East and Africa (EMEA). 
high-end servers, the company | 


For support and service, Uni- 
sys will provide the main 


| point of contact and handle 


first-line support, he said. 
Rawsthorn stressed that 
Unisys is in no way 
turning its back on 
Microsoft Corp., sup- 
plier of the Windows 


| Operating systems 


that previously 
shipped on all 
ES7000 models. 

“We see this as an 
incremental revenue 


| Opportunity for us 
| with Linux. We don’t 


see it detracting from 
what we do with Mi- 
crosoft,” Rawsthorn 





The Unisys ES7000 
Series, Aries 520 


Will Win Legal Fight 


IBM as well as Novell, AutoZone 
and DaimlerChrysler, major IT 
vendors continue to unveil Linux- 
based offerings, Unisys being the 
latest example [see story below]. 
Are there more lawsuits to come 
against additional Linux vendors 
or users? We came out and put 
our claims in front of the 
courts. We look forward to 
getting a resolution to those 
issues. When those issues are 
fully resolved, we'll go from 
there. We've got our hands 
full right now. From our per- 
spective, we’re fine to let the 
reservoir fill. Later on, we'll 
worry about the water flow- 
ing out the other side. We 
don’t want to be spread too 
thinly by taking on the rest of 
the world [now]. It’s a long- 
term game. 


Isn’t it possible, as some critics 
have suggested, that IBM could 
buy SCO in a settlement and 

close the company down? The 


said. The company was pre- 
vented from bidding for some 
contracts because it didn’t 
support Linux, he said. 
Unisys said some organiza- 
tions are already running Lin- 
ux on ES7000 machines, in- 
cluding Pennsylvania State 


University and the Florida De- | 


partment of Children & Fami- 
lies. These early adopters had 
“very little” help from Unisys 
in doing so, Rawsthorn said. 
One area where Linux may 
have a leg up on Mi- 
crosoft’s operating 
system is in its sup- 


port for dynamic par- | 


titioning. If, for ex- 
ample, an ES7000 
machine is running 
one application in an 
instance of Linux 
across 16 processors 
and another applica- 
tion in a different in- 
stance across another 
block of 16 proces- 
sors, dynamic parti- 





notion is that SCO loses either 
way — that IBM buys us, or 
we lose in court. We didn’t 

go into this thing to try to go 
out of business. We're trying 
to reclaim the business that 
was improperly taken from 
us. A settlement to me would 
be to restore what was taken 
from us so that we can stay in 
business. 


In June, SCO reported that Unix 
licensing revenue through its 
SCOsource division totaled just 
$11,000 in the quarter that ended 
April 30 - a 99% drop-off from 
$8.25 million in the same quarter 
last year. What happened there? 
In the day-to-day business, we 
have some speed bumps that 
come up from our [intellectu- 


| al property] issues. In the pre- 


vious quarter, we had several 
large licensing deals, but you 

can’t repeat those every quar- 
ter. It’s not really as brutal as 

people might expect. 


@ 48606 
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In his keynote speech, McBride said that 


| Unix isn’t going away and that SCO remains 
| a product company 


QuickLink 48571 
www.computerworld.com 


tioning allows processors to 
be taken away from one appli- 
cation and given to another as 
the workload changes and 
while the application contin- 
ues to run. 

ES7000 hardware has been 
ready for dynamic partitioning 
for years, but no operating sys- 
tem has been able to make use 
of it, according to Andy Carter, 
Unisys server product manag- 
er for EMEA. “You won’t have 
that in Windows until Long- 
horn comes along,” he said. 

ES7000s with Linux are 
available now, Unisys said. Of- 
ficials could not immediately 
provide pricing. The hardware 
will cost the same regardless 
of the operating system, Raws- 
thorn said, but the cost of the 
software licenses and service 
contracts will vary between 
the Windows and Linux ver- 
sions. @ 48628 


Sayer writes for the IDG 
News Service. 
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EDS Plots to Avoid 
‘Problem Contracts’ 


Company moves 
to ‘agile enterprise’ 


business strategy | 


| of-breed alliances. 


BY DAN VERTON 
LECTRONIC Data 
Systems Corp. has 
launched a major 
overhaul of its busi- 

ness strategy in an effort to re- 

move the term problem con- 
tracts from its lexicon. But the 
firm’s most important con- 
tract, the beleaguered, multi- 
billion-dollar Navy/Marine 

Corps Intranet (N/MCD), con- 

tinues to be an anchor tied 

around the company’s neck. 
During Plano, Texas-based 

EDS’s latest earnings confer- 

ence call with analysts, on 

July 28, CEO Michael Jordan 


| announced an “agile enter- 





| prise” business strategy: a 


network-centric utility com- 
puting model based on “best- 
However, the most critical 
aspect of the new strategy is a 
major revamp of EDS’s entire 
services delivery structure, 


| said Jordan. “This will result 
| in significant consolidation of 


solution centers [and] data 


| centers, and change the way 
| we approach the application 


development business,” he 


| said. “This is how we're going 


to achieve the next $3 billion 
in cost savings.” 

And that part of the compa- 
ny’s strategy for economic re- 
vival may already be at work 
supporting the N/MCI con- 


| tract, a $6.9 billion deal award- 


IBM, Mayo Clinic Take 
Next Data Mining Step 


DB2-based system 
contains records 
on 4.4M patients 


BY BOB BREWIN 
IBM and the Mayo Clinic last 
week said they are moving 
into the second phase of a 
technology partnership aimed 
at using a database of patient 
records to foster what Dr. 
Nina Schwenk, who heads 
Mayo’s IT operations, calls the 
Holy Grail of medicine: indi- 
vidualized patient treatment. 
IBM and the Mayo Founda- 
tion for Medical Education 
and Research, the formal 
name for the Rochester, 
Minn.-based nonprofit health 
care organization, announced 
that they were teaming up in 
early 2002 [QuickLink 28395]. 
After initially putting the med- 
ical records of about 4.4 mil- 
lion patients treated at Mayo’s 
three clinics into a DB2 data- 


base, IBM and Mayo have 
spent the past two years devel- 


| Oping and testing a method- 


ology for mining the data. 
Now they want to analyze 
information about patients in 


| new ways and compare indi- 

| vidual medical records to data 
| about other patients who have 
| similar disease characteristics 
| and genomic makeups, said 


Schwenk. IBM and Mayo hope 
to use the results to fine-tune 
treatments, she added. 

For example, a doctor treat- 
ing a patient for cancer could 
use the data mining system to 


| discover the results of treat- 
| ments given to the last 500 


patients who had cancers that 


| were located in the same spot 
| and had identical genetic 
| characteristics. 


The individualized care 
made possible by such infor- 
mation could one day replace 
current blanket-treatment ap- 
proaches based on standard 





ed in 2000 that’s now valued 
at $8.8 billion as a result of a 


| two-year extension. 


After completing an internal 
review of N/MCI program 
management in January, the 
company put in place “very 
rigorous contract review proc- 
esses” focusing closely on 
“our ability to deliver what we 
propose in the contract, which 
we did not do as well in earlier 
years,” said Jordan. 


SLA Changes 


In addition, EDS recently an- 
nounced a joint commitment 
with the Navy to implement 
commercial service-level 
agreements by Sept. 1. It is 
also about to sign a contract 
performance modification 
that will allow EDS to bill the 


medical protocols, according 
to Schwenk. Instead of treat- 
ing cancer patients with a 
common stew of chemother- 
apy, drugs could be tailored to 
fit specific cases, she said. 
IBM plans to use its Blue 
Gene supercomputer on the 
project to do advanced molec- 
ular modeling for researching 


THE MAYO CLINIC hopes to use 


data mining results to fine-tune 
| medical treatments. 








Navy for services it is per- 
forming but that aren’t cov- 
ered by the contract. 

“We recognized the need to 
make the SLA process more 
reflective of commercial best 
practices,” said Navy Capt. 
Chris Christopher, deputy di- 
rector for future operations 
and business initiatives. He 
stressed that the SLAs are be- 
ing refocused on efficiency 
and are not being adjusted so 
they’re easier to achieve. 

Christopher also confirmed 
plans to modify the N/MCI 


| contract to add a range of ap- 


plication hosting services, in- 
cluding server management, 
network management, security 
services, storage services, and 
hardware and software sup- 
port. He added that the change 
would also enable the Navy to 
order hosting services from 
standard packages rather than 
customizing them for every 
N/MCI user organization. 
EDS has a lot riding on the 
changes. According to Robert 
Swan, EDS’s chief financial of- 


diseases, said Drew Flaada, 
IBM’s director of the partner- 
ship with Mayo. He added that 
Mayo researchers will use 
Blue Gene to do “deep com- 
puting and deep science,” in- 
cluding mathematical model- 
ing and a simulation of gene 


| structures to help predict the 


behavior of diseases. 

The Blue Gene system, 
which is located at an IBM 
facility in Rochester near 
Mayo’s headquarters, has a 
theoretical computing capac- 
ity of 360 trillion floating- 
point operations per second. 
IBM and Mayo are doing de- 
velopment work on an IBM 
p650 Unix server that’s owned 


| by the clinic, and they use a 


higher-end p690 machine as 
the production system that 
stores the patient records in 
DB2. The servers are based 
on IBM’s Power4 processors 
and run its AIX operating 
system. 

Schwenk wouldn't disclose 
the investments being made 
by IBM and Mayo, but she said 
the amount of funding is “sig- 
nificant — a lot of zeros on 


both sides.” @ 48666 





Goals for 


\MPLEMENT new N/MCI contract 
service-level agreements by Sept. 1, 
enabling the company to bill seats 
at 100%. 


COMPLETE agreements with 
maior alliance partners to provide 
the technology backbone for its 
Agile Enterprise Platform. 


REALIZE $1 billion in annual cost 
improvements by year’s end. 


SIGN at least $17.5 billion in total 
contract value for the full year. 


ficer, the N/MCI deal “contin- 
ues to be a drag” on the firm, 
with a $12 million reported 
drop in revenue compared 
with last year due to a decision 
earlier this year not to defer 
construction costs related to 
the contract. In addition, Jor- 
dan acknowledged that contin- 
ued “uncertainty” surrounding 
the deployment of N/MCI 
seats at the Navy’s Bureau of 
Medicine and Surgery yielded 
a $100 million negative cash 
flow setback this year. 

Lorrie Scardino, an analyst 
who covers EDS and N/MCI 
at Gartner Inc. in Stamford, 
Conn., said the changes indi- 
cate that the company is mov- 
ing in the right direction but 
that challenges remain ahead. 

“T don’t think that EDS is 


out of the woods yet by any 


stretch of the imagination,” 
said Scardino. “The financial 
issues loom large. Any IT ser- 
vices provider, especially one 
the size of EDS, has to have 
stable financials,” she said. 
The termination last week 
of what the company called its 
“other commercial contract” 
— the troubled deal with The 
Dow Chemical Co., which 
EDS declined to identify by 


| name during the July 28 earn- 


ings call — is another positive 
sign, said Scardino (see story, 
page 1). However, she said 
EDS faces an uphill battle, 
since IBM, which took over 
for EDS on the Dow contract, 
and Hewlett-Packard Co. are 
the leaders in the utility, or 
adaptive, computing market. 


@ 48669 





MLB.com knows the power of SAS” software... 


How does MLB.com” give fans 
the ultimate baseball experience? 


Allan H. “Bud” Selig, Commissioner of Major League Baseball 


ENTERPRISE 


SUPPLIER 


ORGANIZATIONAL 


CUSTOMER 


INTELLIGENCE 


Major League Baseball 


Millions of fans. Thirty teams. One passion. And 24/7 access to it all through MLB.com. At the official site 
of Major League Baseball, fans can experience baseball in a whole new way — from live ballgames to stats 
in real time, from history to fantasy, across the league or by connecting to individual club sites. MLB.com is 
the richest, deepest source of original baseball news and highlights on the Internet. SAS is proud to provide 
the state-of-the-art data management, predictive analytics and marketing automation software that’s helping 
Major League Baseball enrich the interactive experience for the hundreds of millions of visitors who make 


MLB.com such a big hit. To find out more about SAS, visit our Web site or call toll free 1 866 887 1363 
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The Power to Know, a | SdS. 
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Online Data 


rages, floor plans of office 
suites, and contact names and 
phone numbers for the tele- 
communications service pro- 
viders that serve the building. 

Maria Gemskie, a spokes- 
woman for the Chicago Board 
of Trade, said the exchange 
could not comment publicly 
about specific security pre- 
cautions being put in place. 
But she stressed that “all as- 
pects of security are taken 
very seriously and we are 
looking into [our Web con- 
tent] as well.” 

But information like that 
posted on the exchange’s Web 
site can be a gold mine for ter- 
rorists, security experts said. 
A senior intelligence official at 
the DHS, speaking on condi- 
tion of anonymity, said the 
recent capture of al-Qaeda 
computer expert Muhammad _ | 
Naeem Noor Khan in Pakistan 
yielded a computer filled with 


Continued from page 1 


Dow 


now: a VoIP network serving 
its 46,000 employees in 63 
countries. 

“It was really the pioneer 
days in 2001,” said Jim Slaby, 
an analyst at The Yankee 
Group in Boston. Dow “is one 
of these unfortunate casualties 
of living out on the edge.” 

IBM officials said they 
don’t know how much of the 
prior work will be useful. The 
company, in its discussions 
with Dow, focused on setting 
requirements and not on pri- 
or work. “We’re not obligated 
by any previous architecture 
and design,” said Todd Kirt- 
ley, general manager of the 
industrial sector at IBM Glob- 
al Services. 

All Kirtley would say about 
the prior work was that Dow 
“did not get the traction they 
were hoping to get.” 

IBM’s seven-year outsourc- 
ing agreement, which it de- 
clined to value, covers opera- 
tion of Dow’s global IT infra- 
structure. That includes sup- 


photographs and floor dia- 


grams of buildings in the U.S. 


that terrorists may have been 
planning to attack. 

“Not thinking through the 
security implications of some 


| of the information put online 


can be a very dangerous mis- 
take,” said Amit Yoran, direc- 


| tor of the National Cyber Se- 


curity Division at the DHS. 
“The Pentagon has looked 


| very closely at this issue, and 


certainly corporate America 
should do the same.” In fact, 


| Yoran said the situation is se- 
| rious enough that the DHS 


may need to look into publish- 


| ing best-practices guidelines 
| for companies to follow. 


Unheeded Warnings 
| Eric Friedberg, managing 
| director of New York-based 
| security firm Stroz Friedberg 
| LLC, said the warnings about 
sensitive Web site postings 


that his company took to the 
private sector two years ago 


| have “fallen on deaf ears” 


{QuickLink 27059]. 


Statements by David Kepler, 
vice president of e-business 
and ClO, Dow Chemical: 

JUNE 2001: “Our new tech- 
nology solution allows employ- 
ees to bring the connectivity 

of their offices on the road, as 
well as connect customers, em- 
ployees and offices in a more 
efficient, powerful and global 
manner.” 


AUGUST 2004: “Working to- 
gether, we will leverage informa- 
tion technology to increase pro- 
ductivity, streamline decision- 
making and connect more con- 
veniently with our customers.” 


porting servers, desktops 
and e-mail; providing storage 
and network bandwidth un- 
der a utility pricing model; 
and building the converged 
network. 

The odds may have been 
against Dow from the start. 
Analysts say it was just too 


| far ahead of its time. In 2001, 


“people didn’t understand all 








NEWS 


MacDonnell Ulsch, manag- 
ing director of Janus Risk 
Management Inc. in Marlboro, 
Mass., said making this type 
of information available is in- 
excusable. 

“It may make it easier for 
contractors and service pro- 
viders to do their jobs, but the 
risk may exceed the benefit,” 
said Ulsch. “A well-trained en- 
gineer can easily discern the 


| greatest points of vulnerabili- 


ty in a building by analyzing 
the design. Making this infor- 
mation available is a funda- 
mental mistake with deadly 
consequences.” 

According to Ulsch, what 
companies do or fail to do in 
response to a threat is a direct 
result of their understanding 
of the risk. Consequently, 
when companies are told to 
beware of terrorists driving 
truck bombs into or near their 
buildings, they deploy con- 
crete barriers, he said. 

And that seems to be exact- 


| ly what has happened in the 
| aftermath of the latest threat- 


the issues” involved in deploy- 
ing a converged network, said 


| Bob Hafner, an analyst at Gart- 


ner Inc. And some core tech- 
nologies were unavailable. For 
instance, “we didn’t have the 
tools to do network certifica- 


| tion,” Hafner said. 


A third-party consultant 
who worked on the DowNET 
VoIP project, who spoke on 
condition of anonymity, said 
the project ran into delays be- 
cause replacing legacy sys- 


| tems proved to be very diffi- 
| cult, and there were unantici- 


pated problems. For instance, 
security systems that used 
analog technology didn’t nec- 
essarily work on a VoIP net- 
work. “There was definitely a 
lot of poor planning,” the con- 
sultant said. 


Moving On 


EDS, Dow and Cisco Systems 


| Inc. — the main technology 
provider under the original 


contract — all declined re- 


| quests for interviews to dis- 
| ° 
| cuss the project. 


How much was lost by any 


| of those companies is difficult 


to determine. On July 28 EDS 








i$ Not thinking 
through the 
security implica- 
tions of some of 
the information 
put online can be 
a very dangerous 
mistake. 

AMIT YORAN, DIRECTOR, 


NATIONAL CYBER SECURITY 
DIVISION OF THE DHS 


level increase, with most firms 
focusing on redundancy and 


; recovery while paying very lit- 


tle attention to countersurveil- 

lance and information control. 
Sylvain Pendaries, CIO at 

CDC Ixis North America Inc. 


| in Manhattan, said previous 


terror alerts have loosened the 


| purse strings of executives in 
| his company, enabling him to 
| complete disaster recovery 


plans. CDC Ixis in February 
completed an upgrade to its 


said it had reached an agree- 
ment to terminate a commer- 
cial contract that it didn’t 
identify and reported a $135 
million pretax termination- 
related charge. 

But whatever problems 
EDS encountered with the 
Dow project, they apparently 
haven't affected its outsourc- 
ing deal with Bank of America 
Corp. Indeed, that relationship 
was recently expanded. EDS 


| and Bank of America are 


building a converged network 
that appears to be bigger than 
Dow’s, serving about 180,000 


| employees. 


Last month, EDS signed a 


| $1.1 billion outsourcing deal 


with the bank, which is an 
addendum to a 2002 outsourc- 
ing agreement valued at $4.5 


| billion that was intended to 


integrate FleetBoston’s com- 
munications infrastructure 
with Bank of America’s. Char- 
lotte, N.C.-based Bank of 
America announced its merg- 


| er agreement with Fleet- 


Boston last year. 

Steven Venezia, managing 
director of the network com- 
puting group and network ser- 
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communications network, 
moving from two T3 lines to a 
Sonet ring that connects sites 
in New York and New Jersey 
at OC48 port speeds. 

While an increased focus on 
disaster recovery is necessary, 
Yoran said the lack of focus on 
blocking cybersurveillance ac- 
tivities stems from a discon- 
nect between the terrorist 
alert system and the role of 
cybersecurity in homeland de- 
fense. “In practical terms, tun- 
ing a firewall, changing para- 
meters on antivirus software 
and advocating more frequent 
password changes don’t really 
line up with the different 
threat levels,” he said. 

Michelle Petrovich, a 
spokeswoman for Robert Lis- 
couski, assistant secretary for 
infrastructure protection at 
the DHS, said that while com- 
panies have the right to post 
whatever information they 
want, the DHS encourages all 
companies to add Web site re- 
views to their list of preventive 


| security measures. @ 48662 


vices at Bank of America, said 
the bank is thoroughly plan- 
ning and testing every aspect 
of the network project. 

“I’m confident [because] 
nothing will forge ahead un- 


| less it’s proven,” said Venezia, 
| noting that the bank has mul- 


tiple pilots in progress. If all 


| goes according to plan, the 


bank could have an initial 


| rollout at selected locations 


next year. 

Venezia said EDS has met 
97% to 98% of the bank’s ser- 
vice delivery requirements. 


| @ 48668 


Peer ereccesescesesesesesseeeees 


Clarification 

In the story “Effort Afoot to 
Address E-voting at Convention” 
in our July 26 issue, we reported 
that Aldo Tesi, CEO of Election 
Systems & Software Inc., con- 
tributed $1,200 through the 
Commercial Federal Bank pol- 
itical action committee. It should 
be noted that Tesi made the con- 
tribution in August 1999, prior 

to joining ES&S on Nov. 1 of 
that year. 
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MARYFRAN JOHNSON 


Roll Your Own Future — 


OW HERE’S A REAL CLASSIC on the 
comeback trail: developing your own 
applications. Sounds so retro, doesn’t 
it? The kind of thing start-ups do 
when the CEO doubles as the chief 
product engineer and surrounds himself with a 
cabal of MIT grads writing code. So what’s going 
on when large pharmaceutical companies, insurers, 
hotel chains, health care providers and online pow- 


erhouses like travel firm 
Orbitz are found, in this 
day and age, productively 
rolling their own? 

Computerworld re- 
porter Gary H. Anthes an- 
swered that question last 
week in his cover story 
about the many sensible, 
cost-saving and even sur- 
prising reasons why com- 
panies build their own ap- 
plications rather than buy- 
ing into more packaged . 
software [“Roll Your Own,” Quick- 
Link 47884]. What he uncovered flies 
in the face of conventional wisdom 
that buying is better than building — 
a belief assiduously promoted by 
software vendors of all sizes. 

And no wonder. The lifeblood of 
so many software companies increas- 
ingly flows directly from their main- 


tenance and support fees, which have | 


risen to nosebleed levels of 18% to 
25% annually to offset the economic 
drag of lower sales in recent years. 

Take Oracle as Exhibit A. When 
the database maker posted its finan- 
cial results in mid-June, the single 
biggest factor cited as offsetting its 
slow-moving application sales was 
rapidly growing revenue from those 
fat fees for software maintenance. 
That revenue is increasing nearly 
twice as fast as new license revenue, 
CEO Larry Ellison said. 

But it’s not just the high cost of 
applications and their hefty annual 
fees that are driving development of 
homegrown applications. Ranking 
high as reasons for this approach are 


dissatisfaction with complacent ven- | 


| 
| 
| 
| 


| 
| 
| 
| 
| 


| 





dors that don’t respond 
quickly enough to user 
needs, and dismay over 
software suites over- 
loaded with features and 
fiendish complexity. At 
Reinsurance Group of 
America, for example, a 
$35 million global enter- 
prise administration sys- 
tem that was developed 
in-house not only fueled 
a competitive leap past 
the company’s rivals but 


| also was vastly preferable to the night- 


mare alternative of integrating more 
than a half-dozen commercial pack- 
ages to provide similar capabilities. 
Yet the greatest reason of all to 
roll your own is the ability to tailor 


| IT to your business, to control the 
| fate of applications too vital to trust 
to outside developers. It’s about en- 


| ample, 
| heeded user resistance to complicat- 
| ed sales force automation tools and 





abling (may Nicholas Carr forgive us 
here) a competitive edge that really 


| does matter. 


At Reliant Pharmaceuticals, for ex- 
CIO Ron Calderone wisely 


built a relatively simple system using 
speech recognition technology for 
the field agents. A packaged SFA sys- 
tem would have cost $4 million to $6 
million, Calderone reckoned, but he 


| delivered just what his business com- 


rades needed for about 15% of that. 

“Simple and inexpensive” are of- 
ten the magic words associated with 
the best in-house application proj- 
ects. We’re hearing that mantra more 
often these days, particularly as 
open-source software carves inroads 
at the enterprise level. As Orbitz 


| CTO Chris Hjelm put it in our story, 


“We are largely an open-source shop, 
so when we think about buying soft- 
ware, there’s a general aversion to it. 

The “buy vs. build” debate will no 
doubt go on forever. But the combi- 
nation of open-source software with 
sophisticated development tools and 
standardized Web services is dra- 
matically changing the face of that 
argument. When companies go look- 
ing for technical creativity, innova- 
tion and a competitive edge, they 
won't be buying that off anybody’s 
shelf but their own. @ 48620 


” 





a BOM, > ¥99 


wo?" 4ausso [yf "MMM 


" MICROSOFT TODAY ANNOUNCED THAT THERE ILL 
BE DELAYS IN RELEASING THE EXECUTIVE Bonuses.” 





MICHAEL H. 


The Systems 
Builder as 
Leader 


N MY COLUMN last month 

[QuickLink 47673], I de- 

fined systems builder as a 
person who is central to the 
success of any systems devel- 


opment project. This person 
possesses skills in two main areas: 
designing systems and leading projects 
to build systems. I then looked at the 
five basic skills needed for designing 
systems. This month, I'll discuss the 
six practices that are the basis for suc- 
cess in leading projects. 

In my years of experience in devel- 
oping systems and watching others do 
so, I have found these skills to be the 
essence of project leadership. The 
more accomplished the systems 
builder is in these ar- 
eas, the higher the 
success rate. 


1. Be an effective com- 

municator and negotia- 

tor. The systems 

builder as designer 

collaborates with 

others to create a 

compelling system 

vision. The systems 

builder as leader 

communicates this 

vision in a way that 

attracts people and 

motivates them to 

act. This means 

clearly describing 

a system’s features 

and benefits to a 

business and a tech- 

nical audience and showing how de- 
velopment will progress from vision to 
reality. Systems builders may not all be 
great public speakers or have outgoing 
personalities, but they find ways to use 
the talents they do have to get the mes- 
sage across and win support. 


2. Set high standards and great expectations. 
People want to participate in projects 
that they believe will improve their 
skills and bring them recognition and 
rewards. So the systems builder sets 
high standards for performance and 
helps people to attain them. The sys- 
tems builder also paints a picture that 
highlights all the great things the proj- 
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ect will bring about. As Daniel Burn- 
ham, the great Chicago architect, said, 
“Make no small plans. They have no 
magic to stir men’s blood.” 


3. Delegate, delegate, delegate. A}! 
well-defined projects have a set of ob- 
jectives or milestones that must be 
reached in order to finish the project. 
The systems builder delegates the ac- 
complishment of these objectives to 
the qualified people who have been 
attracted to the project. (If no quali- 
fied people have been attracted, then 
stop the project.) Along with delegat- 
ing responsibility to achieve objec- 
tives, the systems builder also works 
to provide people with the resources 
they need to do their jobs. In this re 
spect, the systems builder becomes 
the servant of the people working on 
the project. 


4. Be available. Delegating work does 
not mean delegating ultimate responsi- 
bility for the project. Systems builders 
stay actively involved. They hold regu- 
lar, weekly project meetings that are a 
forum for honest discussions about is- 
sues, and they have an open-minded 
approach to resolving the problems 
that arise. Systems builders learn that 
in most cases their people already have 
or can quickly come up with good an- 
swers to problems if they are able to 
discuss the situation and get the sys- 
tems builder’s thoughts to help them 
in their own thinking. 

5. Be decisive. Key leadership decisions 
often involve the allocation of re- 
sources to achieve project objectives. 
When a development team runs into 
an obstacle that demands the realloca- 
tion of resources or the redefinition of 
an objective, the systems builder must 
get directly involved. The systems 
builder includes the appropriate peo- 
ple, does the best analysis within the 
time available, makes decisions and 
moves on. If the systems builder isn’t 
willing to make the tough decisions 
when necessary, then no one else will 
either, and the project will lose mo- 
mentum and start to drift. 


6. Act with energy and focus. As a project 
progresses, constant effort is required 
to sell the project and its benefits. The 
systems builder constantly encourages, 
cajoles and assists people to keep up 
the pace of work needed to finish on 
time and on budget. Leaders lead by 
example. They lead from the front. 
The systems builder’s presence and 
demeanor sets the tone for the whole 
project and is a large part of what 
keeps people motivated and focused 
on the work that needs to be done. 


@ 47672 


THORNTON A 


Telecom: 
Opportunity, 
Frustration 


HAT does telecom- 

munications mean 

to you? For most 
C-level IT managers, it’s the 
greatest source of short-to-intermedi- 
ate-term cost reductions, the sector of 
greatest long-term strategic confusion, 
their self-acknowledged zone of great- 
est ignorance and the source of their 
biggest all-around tactical, day-to-day 
administrative frustration. 

These are the conclusions of a sur- 

vey and a series of interviews conduct- 


ed at the most recent CIO 


MAY 


Solutions Gallery at Ohio 
State University’s Fisher 
College of Business. 

A frenzy of contract rene- 
gotiations is delivering cost 
reductions that could make 
even the most frugal CFO 
almost feel guilty. Those 
pricing improvements, com- 
bined with a trend within 
companies of standardizing 
the equipment installed in 
their networks and consoli- 
dating their network ser- 
vices to fewer carriers, is 


Ask the Right Questions When Hiring 


OPINION 


| putting many telecom suppliers in a 


tough situation. As one CIO explained, 
“Prices are dropping all over the place. 
I am always re-evaluating my technol- 


| ogy stack. I am always squeezing my 


providers. I am currently of the mind 


that short contracts are generally in 
| your favor, and negotiating a contract 


midcontract is a good thing to do.” 
Meanwhile, a general rethinking of 


| telecommunications is under way and 
| contributing to the strategic confu- 

| sion. Cable, wireless and fixed-line 

| telephone carriers are rapidly entering 


one another’s businesses. What previ- 


| ously were nondecisions are suddenly 
| up for grabs. Who will provide ser- 


vices to us, and what will they supply? 
Phones have become much more than 


| phones. Handsets take photos, access 
| the Web, and send and receive e-mail. 
| Some even serve as PDAs. More tran- 
| sition is inevitable, with the arrival 

| of the potentially game-changing 


technologies of wireless 
and VoIP. Where should 
wise IT leaders place 
their bets? 

And then there’s the ig- 
norance and frustration 
that telecom causes. De- 
signing, operating, engi- 
neering and troubleshoot- 


networks is growing more 
difficult, and the skills 
needed to do all that are 
becoming increasingly 
scarce. IT leaders are the 
first to admit that they 
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| candidate? They can't, so by setting 
| up tight requirements, they hope 
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| don’t possess deep technical skills in 
| the telecommunications area. At the 


CIO Conference in Pebble Beach, 
Calif., last month, I asked 140 execu- 
tives (via an interactive electronic 
polling system) how they would de- 
scribe their understanding of telecom: 
28% said they had an “excellent” un- 
derstanding, 53% said “average,” and 
19% said “poor.” 

But the responses were very differ- 


| ent when I followed up with a more 


specific inquiry. When asked, “If your 
board of directors asked you to explain 
the line-item detail of your monthly 


| telecommunications bill, would you be 
| able to do so?” 29% said, “No worries; 

| let’s go have a beer,” 32% said they 

| were “a little worried,” and 39% said 

| they would be “in a world of hurt.” 


| “There are no telecommunications 
vendors today that are doing a great 

| job; they all need to be closely man- 

| aged. Operational performance leaves 


much to be desired, and billing perfor- 


| mance is even worse.” 


We are at a pivotal point in the man- 


| agement and deployment of telecom- 
| munication services. Future-focused 
| IT leaders would be well advised to 


spend a little more time with the ven- 


| dors in this area, do some homework 
ing very large IP-converged | 


and put together a plan for the future. 
@ 48556 


More columnists and links to archives of previous 
columns are on our Web site 


| www.computerworld.com/columns 


requests, prioritize and are even 
held accountable for pieces of the 





HILE | certainly agree with 

Paul Glen's conclusions in his 
column “The Wrong Stuff” [Quick- 
Link 47608], | think there is a larger 
problem than the ones he covered. 
When we hire people, we ask the 


wrong questions. We act like game- | 
show hosts, hiring people filled with | 
| Jerry Masters 
| Programmer/analyst, 
| Clinton, Miss. 
information they don’t. More impor- | 


technical trivia. We need to hire 
people who know how to use the 
information they have and find the 


tantly, we need people who under- 
stand that software development is 
multidisciplinary and who can do 
whatever it takes, even when the 
solution is far from programming. 
David Douglass 

Technologies consultant, 
Bloomingdale, N_J., 
david_douglass@ieee.org 





HE big questions to consider 

are: How can a firm hire good 
people if its screening process is 
run by people who don’t know any- 


| thing about the skills they are trying 


to screen? How can you hire good 
people if your HR screeners are too 
lazy to read the résumés? 


S someone who has been 
looking for work for the past 


| three years, | can say that this is the 


first article | have read that exactly 


| describes the silliness of the hiring 


process today. Faced with thou- 
sands of résumés, how can hiring 
managers scan them one by one 
and imagine the potential of every 


| Toronto 
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| that they will hear from only a few 
| candidates. 


A. Leung 


Customer Councils | 
Help Govern IT 


REAT article on the IT gover- 

nance process [“IT Gover- 
nance Is on the Hot Seat,” Quick- 
Link 48025], with sad statistics on 


| those who are still holding out on 


formalizing their processes. Some- 
thing your readers might want to 
consider is the customer council 
concept. Customer councils are cre- 
ated at the business unit or func- 
tional-area level and are like mini IT 
steering committees. They review 


! the backlog, validate projects and 


process like approval, budget and 
testing. My company has found 
much success with such councils 


| Carol A. Fawcett 


Vice president of IS, 
Quest Software, Irvine, Calif. 


COMPUTERWORLD welcomes 
comments from its readers. Letters 
will be edited for brevity and clarity 
They should be addressed to Jamie 
Eckle, letters editor, Computerworld, 
PO Box 9171, 500 Old Connecticut 
Path, Framingham, Mass. 01701. 
Fax: (508) 879-4843 
E-mail: letters@computerworld.com. 
Include an address and phone num- 
ber for immediate verification 

For more letters on these and 


other topics, go to 
www.computerworld.com/letters 
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Controllin | SECURITY MANAGER'S JOURNAL | FUTURE WATCH 

Content Chaos Merger Interrupts Sarb-Ox Project | User Interfaces: The Next Generation 

As documents and Web sites mul- An acquisition prompts a break for a last- A slew of emerging interface technologies 

tiply at dizzying rates, companies minute security audit but fails to slow Sar- | promises to enable a wider range of human-computer 
are turning to content manage- banes-Oxley compliance efforts at Mathias | interaction than is possible today. But don’t throw 
ment software for help. Page 25 | Thurman's company. Page 30 | away that mouse and keyboard just yet. Page 28 
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IT WAS OBVIOUS AS 2002 drew to a 
FIELD A close that Cigna Corp. would have 
alia to cut costs. Sales at the Philadel- 
phia-based health insurance bene- 
fits company had risen for the year, to $19 billion, 
but earnings had plunged from $1 billion a year 
earlier to a loss of almost $400 million. 

For Cigna’s IT organization, one area for savings 
stood out. The company had more than 3,000 
servers and was bringing in new ones by the 
dozen, but server utilization was inefficient. “If 
you had a new application project, you got your 
own boxes, bought your own servers and put in 
your own software,” says Cigna Chief Technology 
Officer Marcus Shipley. “Everything, all the way up 
the applications stack, was a one-off just for you, 
and boxes would run at 10% to 15% utilization.” 

The way to get more out of its servers, Cigna 
realized, was by virtualizing them — enabling a 
single server to run multiple operating systems, ap- 
plications or versions of an application — and by 
enabling dynamic load balancing of those applica- 
tions across server farms. Cigna hoped virtualiza- 
tion would reduce the number of its file-and-print, 
database, application and Web servers by 25%. 

But the company’s multifaceted virtualization 
program became much more than a simple server 
consolidation project. It included aggressive oper- 
ating system upgrades; moves to new hardware, in- 
cluding 64-bit processors, blade servers and stor- 
age-area networks; and, most important, adoption 
of nascent virtualization software from IBM and 
Microsoft Corp. “It’s based on the ‘on-demand’ 
concept of IBM, or concepts of grid computing,” 
says Benjamin Flock, Cigna’s vice president for ap- 
plication frameworks and virtualization. “It’s the 
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separation of the application and the hosting service. 
So I’ve got an application, and as long as I have a ser- 
vice level defined and I manage that service level, 
it should be transparent where it runs.” Flock says 
Cigna is on track to reach the goal of a 25% reduction 
in server operating expenses by year’s end, and he 
expects additional savings in subsequent years. 
Insurance companies aren’t known for pushing the 
edge of the IT envelope, and until 2003 Cigna was no 
exception. Then the pressure to cut costs and the 
tremendous promise of several emerging technolo- 
gies propelled the company into beta, alpha and even 
prealpha pilot projects with IBM, Microsoft and Intel 
Corp. “We tend to be on the trailing side, but now, 
with these activities, we’ve been on the leading 
edge,” Flock says. 


Microsoft Migration 

In 2002, Cigna’s systems built around Microsoft 
products were “in disarray,” says Chris Cox, an enter- 
prise architect. “We had two versions of Visual Basic 
that people were developing with, different versions 
of data access components, different versions of 
database technologies. Since everybody had their 
own machines, they just used what they were accus- 
tomed to using. And the production environment 
had every possible combination.” 

So early last year, Cigna kicked off an aggressive 
migration to Microsoft Windows Server 2003. That 
project began even before the final version of the op- 
erating system was released. Cigna signed on to 
Microsoft’s Rapid Adoption Program and in the 
process reduced its internal server certification time 
from 12 months to just 90 days. 

Windows Server 2003 brings application partition- 
ing and isolation capabilities to the .Net Framework 
development and management tools, allowing Cigna 
to run several similar applications concurrently on a 
single server. Its COM+ feature isolates versions of a 
component so they can run simultaneously on one 
server, and it allows Cigna to install multiple applica- 
tions or versions on the same server without having 
to upgrade each one and then test it for the new en- 


vironment. It also enables Web application “pooling,” | 
| Gerald McDonald is instrumental in proving out the 


via Internet Information Services 6, for running mul- 
tiple Web applications independently. 

Earlier, six or more servers might be dedicated to a 
small application — one each for development, unit 
testing, system testing, end-user acceptance testing, 
preproduction and production. With partitioning, 
many of those functions can be performed on a sin- 
gle server. “Our entire server environment will be 
built out to Windows Server 2003 by the end of the 
year. That’s a big deal,” Flock says. 

In a second major thrust, early this year Cigna 
joined Microsoft’s Joint Development Program for 
Virtual Server 2005. That product takes a software 
approach to partitioning that, with Windows Server 
2003, will let Cigna run multiple instances of the 
operating system simultaneously on one machine. 
“It allows us to split the hardware into logical parti- 
tions like we do on the mainframe,” explains Larry 
Brandolph, enterprise technical architect at Cigna. 
“You get a base OS, then Virtual Server on top 
of that, and three, four or five ‘guest machines’ on 
top of that.” 

Cigna is testing a beta version of Virtual Server 
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2005 and is using an alpha version of the Virtual 


| Server Migration Toolkit to migrate its applications 


to virtual machines. Microsoft says it will ship both 
products later this year. 


Extending WebSphere 


In parallel with its Microsoft migration, Cigna began 
an aggressive move from IBM’s WebSphere Applica- 


| tion Server 3 to Version 5. “We decided to go direct 
to Version 5 because of its clustering and centralized 
| deployment and its better isolation and management 


of applications in a shared services model,” Flock 
explains. 
And early last year, Cigna began working with IBM 


| in its High Performance On Demand Solutions lab to 
| help define requirements for software code-named 


Cayuga. Now a beta product called WebSphere Ex- 


| tended Deployment (XD), it can partition jobs across 
| multiple processors, databases and application 


servers. 
Cigna is now using XD in a proof-of-concept test. 
The company hopes it will provide utilitylike com- 


| pute cycles on demand so that every server doesn’t 


have to be configured to handle peak loads. 
As head of systems testing and quality control, 


new virtualization concepts at Cigna. But as the own- 


| er of 900 servers, he also wears a user hat. Some 300 


of his Windows 2000 and Windows NT servers 


| would have to be replaced in the coming year at a 
| “refresh” cost of almost $9 million, he says. Now, 


with better utilization of his 600 other servers, he 


will have to buy far fewer replacements. “Up until 
| the virtualization, we’ve never had any alternative 
| but to replace those machines,” McDonald says. 


The Next Big Thing 


| Now on track to meet its server consolidation goals, 
| Cigna is laying plans for the next big phase, in which 
| it will augment the shared services capabilities in 

| WebSphere 5, Windows Server 2003 and Virtual 


Server 2005 with new technologies for dynamic pro- 
visioning and on-demand computing. Cigna is look- 
ing hard at IBM’s Tivoli Intelligent Orchestrator 
(TIO) and Microsoft’s Dynamic Systems Initiative 
(DSI, both of which promise to “virtualize the data 
center,” as Flock puts it. The idea is to make all 
servers available to all applications, with excess ca- 








pacity anywhere acting as a buffer against unexpect- 
ed demand peaks. 

TIO, for example, would sit on top of all Cigna sys- 
tems — mainframe, midrange and distributed, both 
IBM and non-IBM — spanning multiple boxes and 
subsystems. It would monitor the efficiency of the 
network and constantly balance the workload by 
sending peak workloads to underused hardware and 
software. 

As for DSI, “Microsoft has not evolved that into a 
product strategy yet, but since we have worked very 
closely with Microsoft and done a lot of work apply- 
ing Virtual Server, Windows Server 2003 and .Net 
technology to build out shared capabilities, we'll 
probably be one of the early adopters in that space,” 
Flock says. 

Corey Ferengul, an analyst at Meta Group Inc. in 
Stamford, Conn., says Cigna is a virtualization pio- 
neer. “Most organizations in the next three to five 
years will be using virtualization in some major part 
of their organization,” he says. “Most are deploying it 
in test and QA environments, and it’s just beginning 
to make its way into production environments.” 

But there are risks for early adopters. “The biggest 
fear is that as you layer on different virtualization 
technologies, there are no clear interfaces between 
them. Management of the physical layer is pretty 


| much figured out, but the virtual layer is still black 


magic,” says Ferengul. “They need to think very care- 
fully about how to do root-cause analysis, change 
management and so on.” 

Cigna’s Shipley says IT initiatives usually focus on 


| either “infrastructure efficiency” or “business solu- 


| tion effectiveness,” but not both. Cigna is trying to 

| address both objectives at once in its virtualization 

| program, he says. Vendors like IBM and Microsoft 

| are helping by integrating their application develop- 
| ment and system management offerings, he adds. 


Still, Shipley says he worries about his ability to in- 


| tegrate systems management software, such as the 
| tools from IBM Tivoli, with software in the Web- 


Sphere and .Net application suites. “I know when a 
server is down, and I can have an engineer respond 
to that,” he says. “But that engineer doesn’t know that 
the server is part of your most critical business 
process. If I can instrument the business process, and 
I know that claims processing is down, now I can 


| make a real good decision. You’ve got to move be- 
| yond just instrumenting the box.” 


Cigna’s new software can do that, and Shipley is 


| likely to get more help from XD and TIO. XD can 
| give processing priority to WebSphere applications 


based on their designated importance or the priority 


| of classes of users. And TIO can do the same things 


across all applications in the enterprise. 
Shipley offers this advice to someone embarking on 


| a big virtualization project: “Look for integrated prod- 


uct offerings, look for good vendor partnerships, and 
don’t be bashful about giving them your requirements. 
Definitely don’t try to roll it yourself.” @ 48172 


MORE ON THIS ONLINE 


The Future of Virtualization: Experts at Microsoft and IBM explain what 
virtualization technology has to offer: QuickLink 48189 


Thanks for the Memory: Cigna hopes to consolidate a SQL server by 
leveraging 64-bit memory capabilities: QuickLink 48193 
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| 1995 THE AMERICAN HOSPITAL ASSOCIATION 

n y launched a Web site — its first ever 
— for one of its publications. It proved so popular 
that another department at the AHA decided to put 
up a site too. Soon others also wanted to be on the 
Internet, and five years later, there were a staggering 
72 AHA-affiliated Web sites, all running on different 
hardware and software, all managed by different de- 
partments and organizations, and all totally inca- 
pable of sharing content with the others. 

It was, in short, Web content chaos, a situation that 
Herman Baumann, the Chicago-based organization’s 
executive director for strategic development, says 
“was not sustainable from a business perspective.” 

The solution, it turned out, was a content manage- 
ment system, which the AHA purchased from Inter- 
woven Inc. in Sunnyvale, Calif., in 2002. The product, 
called TeamSite, has enabled the AHA to consolidate 
the content from all 72 Web sites into a single Oracle 
database, thus reducing maintenance costs while still 
permitting individual webmasters to manage their 

own content. 

Enterprise content manage- 
ment (ECM) software is 
designed to keep track of doc- 
uments and records that are 
stored in a variety of loca- 
tions and formats (paper, Web 
pages, PDF files and, increas- 
ingly, audio and video media) 
throughout a company. Inter- 

aa ue UL est in ECM systems has inten- 
CORUM sified as IT managers feel in- 
trend of integrating document creased pressure both from 
UAT nla cee ACA their own executives and 
management, records manage- from regulatory agencies to 
TATRA el aeelc Lee ccLU ele carefully track and consoli- 
Te Rele CU aac U¢ eAM LAT date all of the organization’s 
key documents. 

For the AH ot only did 
the implementation of a con- 
tent management system help 
to centralize diverse stores of 
information, but it has also 


aa TESTU . re than tripled the op ati WRU eR cues 


Require ECM vendors to 
also show a strategy and 
A Caatst Tic Olmlay (ext eel ATOM TALON (8 
ual products into the flagship 
UCM Ceres 


Look for ECM products 
that “rationalize” functions 
~ meaning they use one reposi- 
tory, one user interface, one se- 
ME GUE RS Oke s 


Steer eRe mC eR Ure 
PE MAUL er me 
fered via partnerships, rather 
than owning the technology 
fasta ese 


vastly increased the content 
available to all AHA organiza- 
tions. Now each group can 
contribute content to the pub- 
lic database, and the others 
may opt to “subscribe” to that 
content and have it posted 
automatically to their sites. 

“Our operating efficiency 
[for the sites] has more than 
tripled,” says Baumann. 

Jerry Valentine was looking 


for the same sort of advice when he began consider- 
ing a content gement package for his company, 
Grange Mutual Casualty Co., a $1 billion vendor of 
property and casualty insurance in Columbus, Ohio. 
The company needed a system that could help cen- 
tralize the disparate types of content used in insur- 
ance applications and claims — content that ranged 
from paper forms to photographs to audio tapes, says 
Valentine, Grange’s project manager for imaging. 
“For instance, we get 35,000 bodily injury claims 
each month, and for each, we take audio statements 


By Sue Hildreth 
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from both sides. These were stored on cassette tapes 
in a warehouse. If the case went to court, somebody 
had to go find the tapes, transcribe them, then put 
them back,” explains Valentine, noting that other de- 
partments kept documents on microfiche and micro- 
film, as well as in good old-fashioned filing cabinets. 

Valentine evaluated several products in terms of 
imaging, workflow, and document and records man- 
agement capabilities. Grange ultimately purchased 
the IBM Content Manager application, with an IBM 
DB2 database, and Input Accel from Captiva Soft- 
ware Corp. in San Diego for scanning documents. 

Now audio statements, along with documents such 
as claims forms and insurance applications, are 
stored in Content Manager. The system is consoli- 
dated in a single data warehouse, with 22 cache 
servers located at branch offices so that large or fre- 
quently used files don’t have to go back and forth 
across the network. 


The Emergence of ECM 

ECM systems like those selected by the AHA and 
Grange Mutual combine a variety of niche content 
management products: those that manage Web con- 
tent, records, documents, digital assets and images, 
plus collaboration tools. ECM software aims to pro- 
vide organizations with a single platform for in- 
putting, storing, searching, editing, tracking, sharing 
and distributing all forms of content. 

ECM has also gotten a boost from recent government 
regulations such as the Health Insurance Portability 
and Accountability Act (HIPAA), the USA Patriot 
Act, the Sarbanes-Oxley Act and a flurry of other less- 
well-known regulations in individual industries. 
These regulations include requirements that organiza- 
tions store documents for specified periods of time; 
make them available in portable, digital formats; and, 

in some cases, track employee e-mails that 
relate to “hot button” legal issues such as 
Securities and Exchange Commission re- 
quirements or employee discrimination. 
Keeping up with the myriad regulations has 
driven increasing numbers of IT managers 
to purchase content management software, 
which can help automate compliance. 

All of this helped push sales of ECM applications 
— which typically start at $200,000 for an enterprise 
license — to $2.656 billion last year, with $3.175 bil- 
lion projected for 2005, according to Joshua Duhl, an 
analyst at IDC in Framingham, Mass. 


Integration Is Essential 

What do you need from an ECM system? For starters, 
integration is important, not only between content 
management components, but also between data- 
bases and other applications. Also, if you plan to use 
a portal other than the ECM vendor’s, “make sure 
your ECM vendor has a relationship with your portal 
vendor,” advises Robert Markham, an analyst at For- 
rester Research Inc. in Cambridge, Mass. 

When the Houston Independent School District 
(HISD) evaluated ECM products in early 2002, it 
looked for one that supported Microsoft Corp.’s SQL 
Server database and provided adapters to Microsoft 
Exchange, SAP and PeopleSoft. That’s because the 
HISD wanted to create a portal to give employees ac- 
cess to e-mail, payroll and benefits information and 
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BEST OF BREED vs. SUITES 


| to allow students to view grade and attendance data, 


with all of it residing on back-end applications. 
Finding support for PeopleSoft and SAP was easy, 
but support for SQL Server was less common, says 
Mark Hill, interim manager of applications for the 
HISD and a vice president at consulting firm Tren- 
dec. “Oracle would’ve been easier,” he says. “It 
seemed [SQL Server] was a challenge for some of the 
vendors.” The HISD ultimately selected Vignette 
Corp.’s Vignette v6 product and Enterprise Applica- 


| tion Portal. 


Find the Right Fit 


ECM products offer a range of functions, and users 
need to match the available features to their needs. 
The first step is to determine the functionality you 
need —- records management, document manage- 
ment, digital asset management, e-mail management, 
collaboration or something else. Also consider verti- 





cal-industry expertise. Many products offer capabili- 
ties tailored to specific industries and their unique 
regulatory requirements. Documentum in Pleasanton, 
Calif., for example, has versions for the health care, fi- 
nancial services, retail and manufacturing industries. 
Stellent Inc. in Eden Prairie, Minn., offers versions of 
its software specifically for the insurance, real estate, 
media and entertainment sectors. Open Text Corp. in 
Waterloo, Ontario, also has several products for verti- 
cal industries, including the automotive, education, 
energy and telecommunications fields. 

Documentum’s certification by the U.S. Depart- 
ment of Defense for complying with the 5015.2 stan- 
dard for records management was important to 
Bechtel Group Inc., a global engineering firm based 
in San Francisco. The 5015.2 standard sets functional 
requirements for records management systems used 
by government agencies and private companies that 
do business with the government. For instance, it de- 
fines the required system interfaces and search crite- 
ria and the minimum records management require- 
ments. For an individual organization to attempt to 
implement the requirements itself would involve a 
tremendous amount of work. “Documentum’s being 
on the list of 5015-certified applications means we 
don’t have to worry about it,” says Darrell Dela- 
housaye, engineering procurement and construction 
systems portfolio manager at Bechtel. 

Likewise, finding a package that would aid compli- 
ance with HIPAA was important to the Surgical Plan- 
ning Laboratory at Brigham and Women’s Hospital in 
Boston. The lab first considered open-source options, 
such as Zope, but instead opted for a commercial 
product from Xythos Software Inc. in San Francisco, 
which offered the sort of security controls — such as 
levels of authorization and logging to track who’s ac- 
cessing which files — that HIPAA requires. 

“Xythos has a ticket mechanism, so you can allow 
someone without an account to have limited access 
to files,” says Michael Halle, director of technology 
development at the lab. Also, because the lab’s re- 
searchers need to share documents with colleagues 
inside the hospital and around the world, it needed a 
product that supported standard technologies — 
such as a Java application programming interface and 
the WebDAV network file management protocol. 

The AHA’s Baumann mostly needed a system that 
could expand with the organization’s needs and had 
a wide range of features, such as collaboration tools 
and support for audio clips. Because, as its earlier ex- 
plosion of Web sites had shown, its members were 
hungry for new technologies to help them share in- 
formation. “We knew we were going to grow into 
new areas, but we didn’t know what those areas 
might be, so we wanted everything to be highly con- 
figurable and flexible,” says Baumann. “We looked at 
[the Interwoven ECM system] as something that 
would go wherever we needed to take it.” @ 48330 





| Hildreth is a Waltham, Mass.-based freelance journalist. 


She can be reached at Sue.Hildreth@comcast.net. 


ECM RESOURCES 


Visit our Web site for a list of vendors that have enterprise content 
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Timely Tech Titles 


They're not typical summer reading, but these books will 


provide useful information on the job. By Tommy Peterson 





BOOK " 3 We occasionally take brief 
note of books on technol- 
a tiay by ogy that seem particularly 
useful because of the time- 
liness of their subjects and/or the quality of 
the information presented. These three titles 
offer comprehensive yet reasonably concise 
treatments of their topics. 


Enterprise Service Bus, by David Chappell 
(O'Reilly Media Inc., 2004; 247 pages, pa- 
perback, $39.95). Chappell has man- 
aged to capture many of the virtues of 
both a primer and a practical hand- 
book for working professionals in En- 
terprise Service Bus. The author pro- 
vides a foundation-level introduction 
to ESB technology, including plenty of 
context about the nascent ESB market 
and the state of enterprise application 
integration in general. Key terms and 
concepts are highlighted in boxes with 
headings like “What Are ‘Standards,’ 
Exactly?” and “To J2EE, or .Net to Be.” 
The book also provides enough gran- 
ular detail, practical advice and case 
———— ———4 studies to make it 
sein neece worth the time of 
Enterprise IT professionals 
service Bus who are already 
© 6 familiar with ESB 
a technology. And 


for all segments of | 


ie audience, 
happell and his 
editors have done 
a splendid job in 
presenting remarkably straightforward 
and useful diagrams. Readers would be 
hard-pressed to find a more lucid or 
helpful book on a technology topic. 


Securing Web Services With WS-Security, 

by Jothy Rosenberg and David Remy (Sams 

Publishing, 2004; 378 pages, paperback, 

$39.99). Though this book opens with 

the assertion that Web services are a 

“transformational” technology for inte- 

grating information, do not fear, gentle 

reader. Rosenberg and Remy go 

beyond the hype and live up to 

their subtitle, “Demystifying WS- 

Security, WS-Policy, SAML, XML 

Signature, and XML Encryption.” 
Securing Web Services With 

WS-Security breezes through a 

few basics, but its target audience 

is readers who are already im- 

mersed in the technology — Web 


services develop- 
ers and security 
administrators, 
along with some 
CIOs and CTOs. 
With users and 
analysts reporting 
enat security con- 
ferns are the 
biggest barrier to 
the adoption of 
Web services by large companies, 


defuse a hot topic. Their approach is 
practical and methodical, going step 
by step through complex topics like 
combining XML encryption with the 
use of XML signatures. The authors 

also recognize that IT initiatives can 
| rarely be undertaken in one big gulp, 
| and they suggest incremental strate- 
gies for ratcheting up Web services 
security. 


Resilient Storage Networks, by Greg Schulz 
| (Elsevier Digital Press, 2004; 441 pages, 
| paperback, $49.95). Even considering 
| that it’s almost 450 pages long, Re- 
silient Storage Networks covers an ex- 
| traordinary amount of ground in sur- 
prising detail. Schulz first considers 
the importance of data availability and 
then marches through descriptions 
| and assessments of all the major net- 
worked storage technologies. After 
taking a look at storage management 
tools and security strategies, he con- 
cludes with chapters describing the is- 
sues involved in creating various sizes 
and types of storage networks, along 
with detailed design recommendations. 
Schulz presents information in di- 
gestible pieces, relying heavily on 
bulleted lists, short sections within 


in Chappell’s book for clarity and co- 
gency. Especially useful are the lists of 
| questions for infrastructure architects 

| or storage managers to ask themselves 
as they embark on par- 
ticular projects. 

This book is aimed 
mostly at infrastructure 
architects and man- 
agers, but it’s good 
reading for anyone who 
wants to learn more 
Sabout storage techno- 
logies. @ 48532 





Rothenberg and Remy have worked to | 


chapters and diagrams that match those 
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Interfaces 


NEXT GENERATION 


Keyboards and mice will face 
competition from motion-sensing, 
gesture recognition and haptic 
technologies. BY JAIKUMAR VIJAYAN 


DAs and smart 
phones are great 
for keeping the 
road warrior con- 
nected to the ex- 
tended enterprise, but the 
technologies have always of- 
fered only limited data input 
capabilities, especially for 
typing-intensive applications. 
San Jose-based Canesta Inc. 
thinks it may have just the 
thing to address the problem. 
The company has developed 
a prototype technology that 
lets users of PDAs and similar 


mobile devices put data ____j _ 


FUTURE 
WATCH 


into their handheld sys- 
tems by simply typing 
on an image of a stan- 
dard-size keyboard 
projected onto a desk- 
top or other surface. The “elec- 
tronic perception” technology 
captures the user’s finger mo- 
tions via emitted light photons 
that form 3-D real-time images 
that are then processed and 
translated into keystrokes. 
The technology can be inte- 
grated into any handheld device 
and includes a 3-D sensor mod- 
ule, a keyboard-pattern projec- 
tor and an infrared light source. 
Canesta has much more in 
mind. “Any situation in which 
a machine or a digital device 
needs to understand its sur- 
roundings is a great applica- 


T 








tion for electronic perception 
technology,” says Jim Spare, a 


| vice president at the company. 


For example, he says, a future 
application could be an intelli- 
gent car-airbag system that 
can sense the size and posi- 
tion of an occupant to prevent 
injury upon deployment. 

And Spare says his projec- 
tion keyboard heralds the way 
to much more powerful user 
interfaces that are based on 
hand gestures. “We'll be able to 
navigate through databases, 
especially when you have dif- 
ferent sets of data with 
complex relationships,” 
he says. “You could 
open up a filing cabi- 
net and pick up a file 
and sift through it with 
your fingers, using gestures 
from your hands as if you 
were actually picking it out of 
the file cabinet.” 

Canesta’s technology is part 
of a growing list of emerging 
user-interface technologies that 
are being designed to enable a 
wider range of human-comput- 
er interaction than is possible 
with traditional mouse- and 
keyboard-based systems. 

Broadly speaking, such 
technologies are designed to 
allow computers to accept 
gestures, motions, speech and 
facial expressions as data in- 


TECHNOLOGY — 


| put methods along with the 
| Mouse clicks and keystrokes. 
Many of these technologies 


nies and are first developed 
for highly specialized applica- 
| tions. But as the technology 

| matures and costs come down, 
expect to see it break into 

| broader markets, vendors say. 

One example is a gesture 
recognition system developed 
for the U.S. Department of De- 
fense by Cybernet Systems 
Corp. in Ann Arbor, Mich. The 
technology was developed to 
facilitate silent troop commu- 
nication during combat. It al- 
lows users to stand in front of a 
camera-mounted monitor and 
manipulate images, data and 
application windows by using 
specific hand movements from 
a lexicon of roughly 80 ges- 
tures recognized by the system. 
A San Antonio-based TV sta- 
tion is using a commercial 
version of the product, called 
GestureStorm, to control com- 
puterized visual effects in its 
weather reports. 

In the future, the technology 
could be used to enable many 
new applications, says Charles 
Cohen, Cybernet’s CEO. A 
drive-up ATM where users 
could carry out transactions 
with simple hand gestures in- 
stead of leaning out of win- 
dows and physically touching 
buttons is one example, he 
says. Gesture recognition 
could be used to control appli- 
ances at home — for instance, 
a TV could turn off automati- 
cally if it sensed the viewer in 
front of it was asleep. 

“This technology is not about 
replacing the keyboard and the 
mouse but to supplement 
them,” Cohen says. “In 20 
years, gesture technologies will 
be as common as the mouse.” 

San Jose-based Immersion 
Corp. makes medical simula- 
tors that give users tactile 
feedback while they’re doing 
surgical simulations. Its Lap- 
Sim simulator re-creates not 
just the sights and sounds of 
the procedure but also how a 
surgical instrument actually 
feels in the hands of the sur- 
geon performing the surgery. 

“You have many very realis- 
tic simulators that don’t pro- 
vide any feedback on how to 





are coming from small compa- | 





IN THE LABS 


® Researchers at MIT are work- 
ing on a human-computer inter- 
face that allows users te interact 
with computers via eye biinks. 
The system is designed for use by 
severely disabled people. 

@ A research project at IBM 
called Shorthand-Aided Rapid 
Keyboarding, Shark, uses pat- 
tern-recognition technology to 


cut through soft or hard tissue 
or what needles might feel 
like when you are pushing it 
through skin,” says Dean 
Chang, chief technology offi- 
cer at Immersion. 

Over the next few years, 
expect to see such tactile 
feedback, or “haptic,” technolo- 
gies find applications in other 
areas as well, Chang says. For 
example, cell phones could 
generate different vibration 
signatures to tell users who 
was calling or if the batteries 
were low. 

Haptics could also enable 
all-in-one medical simulators 
that would allow doctors to do 
incredibly realistic, patient- 
specific rehearsals of complex 
surgical procedures before 
performing them, he says. 

Automobile dashboards pre- 
sent another future opportuni- 


ty for haptics, Chang says. 
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Touch screens that generate 
tactile feedback when images 
of buttons are depressed could 
allow users to control enter- 
tainment and climate systems 
more efficiently than they can 
with today’s knobs and but- 
tons, he says. 

But getting there will take 
some doing, the vendors ac- 
knowledge. In a few cases, the 
base capabilities already exist 
but lack of investor interest is 
holding back further develop- 
ment. “If someone is prepared 
to give me the funding, I can 
deliver some of these things in 
a year’s time,” Cohen says. Im- 
mersion has licensed its hap- 
tics technology to a major cell 
phone manufacturer but ex- 
pects it will take at least five 
years before the technology is 
broadly integrated into the 
company’s products. 

In other cases, the technol- 
ogy needs to mature, Cohen 
says. For gesture-recognition 
ATMs to become a reality, more 
work needs to go into making 
systems that can work well in 
outdoor environments with 
highly cluttered backgrounds. 
Similarly, Chang says, imaging 
technologies have to mature a 
great deal more before the ul- 
trarealistic medical simulator 
can become a reality. @ 48484 
TRASH TALK 
Can you soon ditch your QWERTY 
keyboard? Find out online: 
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A filmmaker uses Immersion’s hand-sensing glove to capture motion 
and then edit and blend the animation. The CyberGlove uses 22 
resistive bend sensors that measure finger and hand position, and 
VirtualHand software translates sensor data into a real-time model. 
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Merger Interrupts 
sarb-Ox Project 


A last-minute security audit for a sudden 
acquisition briefly puts a major push toward 
Sarbanes-Oxley compliance on hold. 


By Mathias Thurman 


HE FIRST E-MAIL I got 
this week was a meeting 
invite with the subject 
line “Emergency discus- 
sion of merger and acquisition 
items for recent acquisition.” 
Once again, the company 
made an acquisition and in- 
formed the IT organization 
only after the deal was signed. 
We understand that these 
deals need to be kept 
under wraps for legal 


reasons. The problem SECURITY 
MANAGER'S 
JOURNAL & 


is that if we discover 
an issue that might af- 
fect the deal, it’s diffi- 
cult to go back and 
change the agree- 
ment. And dealing with issues 
related to the acquisition 
meant we had to temporarily 
stop working on our Sarbanes- 
Oxley compliance project. 

Griping aside, we took part 
in the conference call and 
learned that the acquired firm 
has fewer than 50 employees, 
all of whom work in one loca- 
tion, and it does no software 
development outside the 
country. This definitely made 
life a lot easier for me. 

The most important order 


of business was to get the new 
employees configured so they 
could access our intranet, use 
e-mail and sign up for benefits 
and payroll. From a security 
perspective, before we provid- 
ed VPN client software or cre- 
ated a point-to-point VPN 
tunnel, we had to make sure 
that we wouldn’t be introduc- 
ing malicious code or activity 
from their environment into 
ours. We accomplished this by 
reviewing desktop configura- 
tions, ensuring that they were 
using antivirus software and 
conducting a scan of the desk- 


| top IP address space. 


| 
| 
| 
| 
| 
| 
| 
| 


We had only a few hours to 
conduct our work, so I priori- 


| tized and started on the net- 


work scans. I got a listing of 
their IP address space and used 
Nessus, a freely available port 


| scanner, to run a scan of the 
corporate desktop addresses. 


The results were of some 
concern. Most Windows desk- 
tops hadn’t been 
patched in almost 
nine months — an 
eternity for Win- 
dows systems. In ad- 
dition, several Linux 
desktops were run- 
ning vulnerable ver- 
sions of applications like Se- 
cure Shell and Sendmail. And 
some users were running Tel- 
net, an insecure remote-access 
utility. Since we were short on 
time, we gave the company’s 


IT manager our Linux security | 


guidelines and a copy of the 


| assessment report. 


For the Windows desktops, 
we had users install the latest 
patches and our corporate 
antivirus software. Our other 
immediate goal was to identify 
and take control of critical as- 
sets. This included a content 
versioning system repository 
containing the company’s 


Most Windows 
desktops hadn’t been 
patched in almost 
nine months - 
an eternity for 
Windows systems. 


source code, a workstation 
| housing the company’s finan- 
cials and HR files, and backup 
tapes, which were being 
| stored at an employee’s home. 
|  Ingeneral, the acquisition 
assessment went well. Other 
| than the desktop environment, 
I didn’t find any glaring secu- 
rity holes or issues. It took 
about six hours to get all the 
desktops to a point where we 
| felt comfortable giving them 


is just an interim step. Ina 
month or so, all employees in 
the acquired company will be 


| relocated to our corporate of- 


fices, where they’ll receive our 
| corporate-standard desktop 
| hardware and software image. 


| Back to Sarb-Ox 


| I’ve received many e-mails re- 
garding the status of our Sar- 

| banes-Oxley Act compliance 
efforts. I didn’t mention the 


| because I find audits and com- 
pliance work boring and didn’t 
have much to report. But now 
| [have an update: We hired 
| one of the Big Four consulting 
firms to assist us in the prepa- 
ration work toward our com- 
pliance efforts. It’s not the 
firm that will actually audit us 
later this year, since Sarbanes- 
| Oxley precludes us from using 
the same firm for both tasks. 
The Sarbanes-Oxley guide- 
lines are vague, and we had no 
| experience in-house. So we 
figured that if we got a big- 
name consultancy to assist us, 
| things would be done in a way 
that would be acceptable to 
the Big Four accounting firm 
that will be doing the audit. 
Having this assistance has 
helped us tremendously. 
We've gotten to the point 
where we’ve identified our 
key controls — those areas 
that management felt were im- 
portant to ensure the integrity 
of the IT infrastructure. At the 





access to our network. But this | 
| on the Oracle database serv- 


end of the day, management 
| will attest to the effectiveness 
of the IT controls as they re- 
| late to the financial systems — 
| and they will be the ones who 
| could face legal consequences 
if the audit doesn’t go well. 
The auditors and a couple 
of members of our audit and 
compliance department devel- 
oped a series of tests that cor- 
respond with the key controls. 
For example, one of the con- 
trols is that only database ad- 
ministrators can migrate code 
to a production Oracle appli- 


| cation server. The test for this 


would be to obtain a list of the 
| database administrators and 

| ensure that only they have the 
proper permissions to execute 
the utility, which is used to mi- 


es, patches and script changes 


ers. This would be accom- 
plished by getting screenshots 
of the password files and file 
permissions for certain code- 
migration utilities. 

I’ve been spending a fair 
| amount of time going through 
the tests to ensure that they’re 
valid and identifying gaps or 
errors. So far, we’ve identified 





| several. For example, in the 





work in my last column simply | 


| database code-migration con- 


trol, we discovered that ad- 

| ministrators use a shared ac- 

| count that gives everyone in 
the administrators group per- 
mission to execute the utility 
that migrates code. Because 
we can’t control or prove who 
has access to the shared ac- 

| count, this shared account is a 

| gap. That and other problems 

| either need to be fixed or 

deemed an acceptable risk by 

management. 
Although the database mi- 

| gration issue is an easy fix, 

others may not be. It will be 

interesting to see what man- 

| agement wants fixed and what 

they’ll be willing to live with 

as we go forward. D 


WHAT DO YOU THINK? 


This week's journal is written by a real securi- 
ty manager, “Mathias Thurman,” whose 
name and employer have been disguised for 
obvious reasons. Contact him at mathias_ 
thurman@yahoo.com, or join the discussion 


To find a complete archive of our 
Security Manager's Journals, go online to 
@ computerworld.com/secjournal 





grate code and include bug fix- | 
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Security Bookshelf 
® Network Security Hacks, by 
Andrew Lockhart; O'Reilly & 
Associates, 2004. _- 


When I first started 
thumbing through 
this title, | thought 
that it might be one 


there are several areas the au- 
thor discusses that have been 
covered elsewhere, Lockhart 
spends only a few pages on 
those subjects before moving 
on. For example, just six pages 
are devoted to the Nessus re- 
mote security scanner. 

| was pleasantly surprised 
to see that the author took 
time to present some lesser- 
known but very useful tips. For 
example, he talks about tools 
such as Sguil, a real-time 
monitoring tool for intrusion- 
detection systems. The book 
doesn’t include a companion 
CD-ROM containing the tools, 
but it does offer Web links 
where you can download 
them. | also would have liked 
to see security tips for routers 
and switches. Nonetheless, 
this is a great complement to 
the other titles in O’Reilly’s 
Hacks series. 

~ Mathias Thurman 


Database Security 
Software Released 


Guardium Inc., a Waltham, 
Mass.-based database securi- 
a set of integrated applications 
for protecting relational data- 
bases. The SQL Guard Securi- 
ty Suite features a module 
called HealthGuard that lets 
companies continuously as- 
sess and monitor enterprise 
database security and pro- 
vides metrics and methods for 
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Axena Ships 
Sarb-Ox Tool Kit 


Axena inc. is shipping its SOAx 
Toolkit, software that’s designed 
to provide companies with up- 
dates on their internal controls 
environment to help them satisfy 


the requirements of the Sarbanes- | 


Oxley Act. The browser-based 
software supports multiple lan- 
guages, according to Orlando- 
based Axena. Pricing starts at 
$25,000 for 25 seats. 


Network Monitoring | 


Software Updated 


Network Instruments LLC has 
announced Observer 10, a net- 
work management, analysis and 
troubleshooting tool for use with 
remote networks, virtual LANs 
and wireless networks. With the 
new version, network monitoring 
as well as analysis and process- 
ing of network data is conducted 
at the individual probe level, ac- 
cording to the Minneapolis-based 
company. Pricing for Observer 
starts at $995. 


BEA Upgrades 
Developers Portal 


BEA Systems Inc. is expanding its 
Dev2dev developer portal site to 
include technical content from 
the Java community and O'Reilly 
Media Inc. CollabNet Inc. is pro- 
viding the infrastructure to make 
the site more interactive. The en- 
hanced portal is scheduled to be 
unveiled in October, BEA said. 


Dime-a-Minute Web 


Conferencing Added | 


A pay-per-use option is now 
available for ASAP, an instant- 
messaging-based Web collabora- 
tion application from Convoq 
Inc. ASAP combines video- and 
audioconferencing over IP, text 
chat, screen-sharing and Power- 
Point presentations for 10 cents 
a minute per participant, says 
Lexington, Mass.-based Convog. 
ASAP also allows users to detect 
the presence of users on other 
IM systems and invite them to 
participate in chat sessions. 





TECHNOLOGY 


transparency Is 


Clearly on the 


DANIEL J. WEITZNER 


HE PERFECT STORM of transparency is 
gathering over today’s enterprise comput- 
ing environment. Today we are seeing the 
gradual demise of stovepipe applications, a 
rapid decline in the cost of enterprisewide 
(and Webwide) queries and a stunning proliferation of 
data from sensor networks inside and outside the en- 
terprise. Add to this the fact that storage costs seem to 


be approaching zero, and 
you have the makings of a 
transparent enterprise. 

In a transparent enter- 
prise, we will be able to 
know more about the dis- 
parate data sets that we 
create, find unexpected 
connections in previously 
unconnected pieces of data 
and see more information 
about individuals, whether 
they are customers or em- 
ployees. Transparency will 
emerge through business 
intelligence systems, in 
buildings whose security 
systems record and log 
the identity of anyone in 
the facility at any given 
moment, and in collections of tele- 
metry data from various private and 
public wireless networks that tell us 
the location of individual devices and 
their users. 

Consider the enterprise data store 
that not only has detailed sales transac- 
tions but also travel expense reports 
such as rental car records, cell phone 
billing details, meal receipts and 
perhaps even electronic toll-booth 
records. Of course sales managers will 
be able to determine which sales rep 
has the most efficient sales-to-expense 
ratio. But managers may also be able to 
figure out that an employee exceeded 
the speed limit because he wrote a 





sales invoice in Albany, 
NY., just two hours and 
10 minutes after leaving 
Burlington, Vt. Rental car 


records and MapQuest will | 


confirm that it should take 
two hours and 18 minutes 
to drive that distance at the 
legal speed limit. 

If you’ve got a database 
integration or business in- 
telligence project that’s 
behind schedule, you’re 
probably skeptical about 
whether this magic that 
I’ve dubbed transparency 
will ever arrive. Looking 
past near-term sticking 
points, we can, however, 
be confident that it will. 


mation, and it’s easier to just keep it all 


| than it is to figure out what to delete. 
| Structured data formats such as XML 
| and RDF are making it possible to 

| mine this growing volume of data for 
| new information. Perhaps most impor- 
| tant, the systems we build today will 
| one day support queries that we didn’t | 
| even anticipate. 


Changes in the public policy envi- 


| ronment are also leading us toward 
| greater transparency. Regulatory re- 


quirements such as the Sarbanes- 
Oxley Act and a California law requir- 
ing disclosure of security incidents 
demand greater systems transparency. 
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Privacy advocates such as science fic- 
tion writer David Brin are even calling 
for increased transparency of surveil- 
lance systems to safeguard privacy. 
While transparency-producing 
systems don’t require that we plan 
queries in advance, it behooves us to 
prepare for the impact of this new- 
found power. Do we have any idea 
how work styles will change? Will the 
ability to discover new relationships 
in competitively sensitive data create 
new security risks? Who’s in charge of 
taking advantage of the power of trans- 
parency, and who sets the rules for 
what’s acceptable? Do we have privacy 
policies to deal with the flood of re- 
vealing personal location information? 
Are we evolving social conventions to 
help people deal with their increased 
exposure wisely? How do employees 
feel about all of this? Perhaps the key 
question is, are we doing the best job 
of leveraging an increasingly transpar- 
ent environment to make our enter- 
prises more efficient and productive? 
I'll be exploring individual facets of 


| the transparent enterprise in future 
| columns. But why write about this 
| here, in the pages of Computerworld? 


I believe that CIOs and other IT pro- 


| fessionals are on the forefront of the 
We’re collecting more and more infor- 


transparency revolution, like it or not. 
You know the great breadth of data 
available to you, and you see the grad- 


ual (sometimes painfully gradual) in- 
| tegration of systems across the enter- 


prise. You’re transparency experts al- 
ready. It’s the rest of the world that has 


| to catch up. What’s your experience 


| with enterprise transparency? How 


| is your organization adapting? Is it the 
| boon or bane of your existence, or am 


| 
| 


| I just imagining all of this? I look for- 


ward to hearing from you. @ 48574 
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Got Questions About 
Network Consolidation? 


Computerworld’s IT Executive Summit Has the Answers 


If you’re an IT executive* in an end-user 
organization, apply to attend Computerworld’s 
upcoming complimentary half-day summit 
on! ‘ t 


ClOs and senior IT executives are finding that 
consolidating high-performance networks can 
play a key role in improving business applica- 
tion performance while significantly reducing 
operational costs. 


The proliferation of network capacity and relat- 
ed storage and server infrastructure presents a 
daunting challenge for today’s enterprises, 
many of which are positioning themselves for 
growth yet still seeking to reduce IT costs 
where feasible. 


By leveraging the knowledge of industry 
experts and the real-world experience and 
advice of your IT peers, this IT Executive 
Summit will provide an overview of effective 
strategies for consolidating and connecting 
networks and data center applications. 


*Complimentary registration is restricted to 
qualified IT executives only. 


Appiy tor registration today 


For more information or to apply, visit 
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Streamlining Networks and Data Centers: 
The Business Benefits of Consolidation 


Chicago * August 25, 2004 
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Internet vulnerabilities and back doors 
that can be created through outsourced 


application development were just a few 


of the security issues fielded in a panel 


technical job to the business side of 
the organization; the effect of fewer 
computer science grads entering the 
workforce; and the best and worst 


Former IT manager Dick Lefkon 

the key to getting better require- 
ments for IT projects is to teach your , 
business analysts to interview users 


discussion with four CSOs. Page 36 places to recruit CIOs. Page 37 properly. Here’s how. Page 35 


HEN CIO Michael H. 
Hugos approached his 
company’s top business 
executives with an idea 
for building a collabora- 
tive forecasting system 
for customers, the execu- 
tives immediately became uneasy and 
suspicious. 

“The finance people were worried 
I'd commit [them] to a multimillion- 
dollar project, and the sales people 
were worried I'd stir up a hornet’s nest 
with their customers,” says Hugos, 
CIO at Network Services Co., a $6. 
billion distribution cooperative in the 
Chicago suburb of Mount Prospect. 

But Hugos persisted. He created a 
brief PowerPoint presentation e: n- 
ing his plan for a relatively simple and 
inexpensive online database that both 
customers and NSC employees could 
ee ey access to view, correct and update a 

ee “i single set of forecast numbers. He took 
. it back to NSC’s vice president of sales, 
. : Dave Smith, with whom he is chum 
and to the head of customer serv 
- Together, they showed it to one of 
NSC’s top customer companies, which 
gave it an enthusiastic thumbs up. 

“Mike is a great salesman,” says Jen- 

nifer Jackolin, NSC’s director of cus- 


ee ee res 


x m BY JULIAKING 


lative’ 










Network Services Co. ClO-Michael H. Hugos (right) enlisted the support of sales vice president Dave Smith 
(left) before pitching his idea for a collaborative forecasting system to top business executives. 
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tomer service. “I always thought of him 
as a salesman disguised as a CIO. He is 
a terrific collaborator and idea man.” 

Hugos is also among an elite group 
of proactive IT leaders who haven’t 
been intimidated by back-to-back 
years of cost cutting, slashed budgets 
and dismal business/IT alignment 
scores. In March, a paltry 10% of 200 
executives jointly surveyed by Deloitte 
Consulting and IDG Research Services 
reported that their companies have 
been successful at aligning IT with 
corporate strategies. 

“Some of us have felt beat up, and 
we've taken a passive position in the 
IT profession,” says Hugos, who is a 
Computerworld columnist. That makes 
it easy to fall into the trap of waiting 
around to be told what to do. “I think 
we have slipped into this out of a defen- 
sive reaction, and now it’s time to brush 
ourselves off and try again,” he says. 

Here’s some advice from CIOs who 
successfully pushed through their un- 
solicited ideas, saving or earning their 
companies millions of dollars in the 
process. 


Knowledge Is Power 

Knowing the business inside and out 

is the best and fastest way IT can gain 
credibility for its homegrown ideas for 
addressing business needs. That’s why 
Bill Homa, CIO at Hannaford Bros. Co., 
a 120-store grocery chain based in 
Portland, Maine, fills IT positions with 
people who have worked on the front 
lines. 
you can’t experience all of the issues 
that people there run up against,” says 
Homa. Hannaford’s head of retail sys- 
tems, for example, was a store manager 
for 15 years. 

That business experience was the 
linchpin in winning over executive 
support for an IT proposal to equip all 
stores with wireless technology, Homa 
says. Today, all ordering, inventory and 
product layout activities are performed 
in stores via handheld wireless devices 
with access to a real-time online data- 


66 Unless 

you've 

worked in 

astore, you 

can’t experi- 

ence all of 
the issues that people 
there run up against. 39 
BILL HOMA, CIO, HANNAFORD BROS 


“Unless you’ve worked in a store, | 


eR RL aL 


Know your company’s customers, 
markets and competitors - and their 
Werte oe 


Read the trade publications that 
your CFO and CEO read. 


Buddy up with regional sales 
managers. They're your window to 
EME uu Mm CR ei a Cy 
OR Geis 


Always seek to relieve conflict and 
drudgery in business processes. 


When feasible, let IT employees 
test-drive your ideas first. 





Base your suggestions on your IT 


| 
| department's strengths. 
| 
Build credibility with quick-hit, 
CoS i NUL m ae) ca Mm comet are lee 
Maire m els ssme (aera tut) 


and get them to fund such projects. 


base of purchasing and product history. 
“When someone in the store is order- 
ing a product, we can prompt them 
with what we think they should order 
based on that store’s previous week’s 
sales as well as their sales for the same 
week of the previous year,” Homa ex- 
plains. A single application for marking 
down perishable meat and poultry has 
paid a 100% return on Hannaford’s 
$2 million investment in wireless infra- 
structure, which now supports 11 dif- 
| ferent applications, Homa says. 
| Other CIOs recommend organizing 
| the IT department so that a team of 
| staffers is dedicated exclusively to 
| staying current on all business issues. 
At Calpine Corp., an energy produc- 
er in San Jose, CIO Dennis Fishback 
| has created an IT team whose sole 
| job is to study the markets in which 
| Calpine operates. Fishback says it’s all 
| part of his philosophy and drive to 
| have IT “transform” the business 
rather than simply help or improve it. 
“The people we have in IS in many 
cases are energy professionals first 
| and IT specialists second,” Fishback 
| says. Indeed, it was IT — as opposed 
| to brokers or financial executives — 
| that conceived the idea and pushed for 
the creation of a set of real-time inter- 
| faces to several energy markets. Since 
2002, Calpine’s $136,000 investment in 
the interfaces has helped generate or 
protect millions of dollars in revenue, 
according to Fishback. 
“Nobody from the business came 





and asked us for these real-time inter- 
faces,” Fishback stresses. “We [in IT] 
recognized the need. IT has to be 
proactive. You have to understand the 
business. It’s more important than un- 
derstanding the technology.” 


Sell Your Strengths 


IT services giant Accenture Ltd. for- 
mally reviews and updates its IT strat- 
egy every two years. It was during one 
of those reviews that CIO Frank Mod- 
ruson, formerly a consultant at the 
company, decided to compare his own 
list of internal IT strengths with the 
portfolio of IT services Accenture sells 
in the market. 

“Internally, we had a strength in 
managing and architecting IT infra- 
structure, yet that was not a service we 
were offering in the market,” Modru- 
son recalls. Accenture had also just mi- 
grated 80,000 of its own users from 
Lotus Notes to Microsoft e-mail, yet 
Microsoft integration was another 
key strength that was not on the com- 
pany’s list of revenue-generating ser- 
vice offerings. 

Working with the executive steering 
committee, Modruson pushed for the 
| company to offer both services, which 
it now sells. Accenture also entered 
into a joint venture with Microsoft 
Corp. to create Avanade Inc., a global 
technology integration company dedi- 
cated to Microsoft software. Launched 
in April 2000, Seattle-based Avanade 
now boasts more than 1,000 customers 
and 2,000 employees. 

“The business is reaching out to the 
CIO to drive more [innovation],” Mod- 
ruson says. Even though he has seen 
budget cuts and an overall down econ- 
omy force many IT organizations into 
“order-taking mode,” IT needs to be 
proactive, he says. “That’s what we tell 
our clients they should be doing, too.” 





Try This at Home 

At Marcus & Millichap Real Estate 
Investment Brokerage Co. in Encino, 
Calif., “anything that comes out of my 
department has to make brokers’ jobs 
more efficient,” says CIO Rick Peltz. 

| He often tests ideas in IT before bring- 
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DENNIS FISHBACK, CIO, CALPINE CORP. | 


&& Anything 
that comes 
out of my 
department 
has to make 
brokers’ jobs 

more efficient. 99 

RICK PELTZ, ClO, MARCUS & MILLICHAP 


ing them to the business. 

For example, before floating his pro- 
posal to equip the company’s 800 bro- 
kers with wireless BlackBerry devices 


| as a way to stay current with e-mail, he 


decided to try them first in his own de- 
partment, which readily embraced the 
technology. Given IT’s positive re- 
sponse, Peltz knew the BlackBerries 
were right for busy agents looking to 
stay in contact with clients without 
lugging around their laptop computers. 

He was right. More than 100 agents 
“flocked to the technology within the 
first two months,” he says. 

That gave Peltz and the IT depart- 
ment the credibility and the $1 million 
in funding needed to build and launch 


| a Web-based marketing application 
| that lets agents create a customized 


marketing presentation — with the 
look and feel of a PowerPoint presen- 


| tation — using information that is 


stored in templates and accessible via 
the Internet. With the previous mar- 
keting application, agents had to be 
on the company intranet to access the 
information they needed for presen- 
tations. 

“It was a fixed solution. If they de- 
cided to work on the weekend at 


home, they’d have to re-enter all of the 


information,” Peltz says. “We hooked 
them on this new application” because 
it simplified and shortened the cre- 


| ation of marketing packages, he says. 


What users want from IT, Peltz ex- 


| plains, is “a way to streamline proc- 


esses and support to make a new proc- 
The best way to do that, he 
adds, is to first use the technology 
you're proposing internally and then 
decide whether the benefits are truly 
there. 

The bottom line, says Calpine’s Fish- 
back, is that CIOs can take one of two 
paths: “You can be a reactive order- 
taker, or a business process change 
agent,” he says. If you allow yourself to 
be an order-taker, “you're a prime can- 
didate for outsourcing,” he explains. “If 
you really want to make a value-added 
contribution to your company, you 
have to be proactive.” @ 48047 
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Listen! 


Want to build better systems? Teach your 
people to conduct better user interviews. 
By Dick Lefkon 


ASK NEARLY ANY IT MANAGER how helpful 
business users are, and he will eventu- 
ally say something like, “I know it’s not 
their fault, but when I expend re- 
sources to gather predesign informa- 
tion from the business users, they tell 
us only half of what we need to know 
and then give me trouble at sign-off 
when we've built exactly what they 
asked for.” 

That may be true. But why? 

Maybe it’s because the business ana- 
lysts who question the users aren’t 
routinely given real training on how to 
conduct an interview and don’t receive 
feedback on their performance. They 
may be schooled in how to distill the 
vital facts into UML product templates 
but not in how to get the valid facts 
from users in the first place. 

Half the solution is to construct and 
require regular use of a user interview 
form. Every IT unit should have such a 
form for gathering systems planning 


STEPHANE DENIS 


| information before specifications are 


| written. Dust it off, distribute it to your 


| best advisers, and discuss it. Then de- 
velop a plan for improving and reim- 
plementing it. That way, you'll 
be sure that all the important 
questions you come up with in 
advance will get asked in the 
first interview. This will go a 
long way toward producing a 
well-designed system 
But this works only if the 
business analyst is really lis- 
tening to the answers. You 
can teach him to listen 
through a simple tracking-and-feed- 


back protocol, and that’s the second in- 


gredient for getting better business 
facts into your design specifications. 


How the System Works 


Here’s how it works: A supervisor or 
business analyst mentor tags along 
with the business analyst to the user 
interview. At the user session, both the 
active business analyst and the silent 
mentor write on copies of the standard 


| lyst captures business facts, the men- 
tor uses the form to record sequences 
| of code letters plus occasional key- 
words to facilitate later review of the 
session. The user needn't be told that 
the mentor is “grading” the analyst’s 
interviewing skills. 

Using a simple, 10-letter mnemonic 
| code (see box at right), the mentor 
notes what he sees and hears every few 
seconds during the interview. Even if 
the mentor has never before coded or 
analyzed interviews, the process is 
easy to learn and can be quickly inter- 
nalized with a little practice. 

Here’s how a mentor might employ 
the code to record a few seconds of an 
interview: 


= ANALYST: What process difficulties have 
you had with the current bond trading sys- 
tem? (Mentor: Q...Q) USER: Well, we’ve 
been booking styrips and zero coupon 
bonds as very long-term T-bills, but 
sometimes the P&L results reverse 





IT MENTOR 


“user interview form. But while the ana- 








| credits and debits and also come out 


much bigger than the trader expected. 
(Mentor: A...A...A...A) 


| @ ANALYST: So you're saying T-bills lasting 


many years sometimes have their profits 
and losses reversed and have an mn enenpect: 


USER: Come to think of it, I unt re- 


| called some real bookkeeping prob- 

| lems the such-and-such system caused 
| last year. (Mentor: N...N) 

| # ANALYST: Yes, | remember about book- 

| keeping very well. You know, | got all A’s 


and B’s in it at Wharton. (Mentor: X...X...X) 


Later, the mentor and analyst should 


meet to go over the mentor’s notated 
user interview form, and the mentor 


can explain how the analyst encour- 
aged or discouraged the user’s infor- 
mation flow during the session. 

The analyst should easily discern 


| where improvements are needed from 
| the raw counts as well as the se- 


quences of the code letters. For in- 
stance, producing lots of QA 
and QN sequences is good, 


frequent QQQ’s or XXQ’s 
may mean that the interviewer is wast- 
ing time by overexplaining questions. 
Usually, business analysts readily 
accept a mentor’s guidance and keep 
the 10 letters in mind at subsequent 


| user interviews. You'll find that they 
| become better interviewers through 


practice, followed by a half-hour cri- 


| tique in which real counts of the letter 
| codes 


are reviewed in context. 
Soon, your design specifications will 
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categorizing each of these 
ao with one of the 10 codes 


Mie ce Rm ma oe 
PMO eure ae mee 
3.[ ] Which buildings will they be in? 
4.[ ] Your reports are easy to read. 

5. [ ] We’re upgrading the mail server. 
af ] STs ecg mec emo m0 
7.[ ]Users seldom describe needs well. 
8.[ ] | can see why you got angry. 
MMA R-UE mir ecu mule 
10.[ ] 80 clerks, but only 20 at a time. 


Answers: 1-D; 2-N; 3- Q; 4-P: 5-X: 6S: 
T-J:8-C; 9-B: 10-A 


| be written from more and better busi- 


| ness-user input. @ 48290 


| Lefkon is a former IT manager at Smith 

| Barney and Equitable Capital who now 

| consults for financial services companies. 
| Contact him at aitp368@hotmail.com. 


| Thisis the first in an occasional series 


of columns written by IT managers for 


| IT managers. 


eXplain information to user 
Bimal i810 
Justify self vs. user 


Coane 
Answer given by user 
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SECURING 
CORPORATION 


Four chief security officers discuss the 
steps they ve taken to safeguard their 
organizations IT infrastructures from 
internal and external threats. 


HACKERS. MOLES. CYBERTERRORISTS. 


GA 


These are some of the primary chal- 
lenges that corporate chief security of- 
ficers are facing these days. In May, Computerworld’s 
Thomas Hoffman moderated a panel discussion with 
four CSOs who explored these topics at a meeting of 
the New Jersey chapter of the Society for Information 
Management. 

The panelists who participated in the discussion at 
the meeting in Morristown were Stephen Foster, global 
chief information security officer at Avaya Inc. in 
Basking Ridge, N.J.; Don Garvey, chief security officer at 
Chubb Group of Insurance Companies in Warren, N.J.; 
Mike Zboray, chief security officer at Gartner Inc. in 
Stamford, Conn.; and Jonathan Zwang, head of global 
infrastructure strategic planning, benchmarking and 
information systems security at Aventis Pharmaceuti- 
cals Inc. in Bridgewater, N.J. 


What are your organization’s top security concerns today, 
and what steps are you taking to address them? 

GARVEY: One of the things that’s emerging is the 
dependence on the Internet infrastructure. Two or 
three years ago, if Internet access was lost for a cou- 
ple of days, it would be [merely] inconvenient unless 
you were in an online business. 


Back doors left by software developers. 





But if a terrorist group or a group of hackers want- 
ed to take the Internet out, you could really affect the 


| U.S. economy today, and I don’t think it’s that diffi- 


cult to do. Executives don’t realize just how depen- 
dent they are on that infrastructure, and we need to 
sit down with them and start to build a strategy 
around how we would conduct our business if the 


| Internet were disrupted. 


ZWANG: One of the concerns that I have right now 
is what I call cybervandals — basically, kids who 
have nothing better to do than to create worms and 
viruses. I see a disturbing trend: that it’s starting 
to escalate to organized crime and move toward 
cyberterrorism. 


What are some of the key security challenges posed through 
business process or IT outsourcing? 

FOSTER: One of the problems with outsourcing is 
ensuring the quality of work. A lot of development 
work is being sent offshore to India and Asia. But 
what controls are in place to ensure quality of ser- 
vice, confidentiality of information, protection of 
proprietary assets, [and] proper background investi- 
gations for employees working with your informa- 
tion? You're potentially giving the keys to the king- 
dom to an outsourcer, and you're relying on them to 
provide good security. 





We have to push back with our executives and ad- 
vise them that the security risks might outweigh the 


| ‘ . 
| cost savings through outsourcing. 


ZBORAY: The Gartner culture has always been, “Do 
it now and then find out who you were supposed to 
ask.” The problem is that we had some staffers out- 
side of headquarters who were acquiring Web ser- 
vices that we didn’t know about, and the security 
state of those sites was unverified. 

I can remember once when our CIO called me and 
asked, “What the heck happened to our Web site?” 
None of us in IT knew what he was referring to. Af- 
ter some digging, we found that one of our business 
units had acquired Web services through a service 
provider and then that outsourced site was hacked. 

What worked for us was teaming up with the con- 
tracts people, since they have more leverage than we 
do in IT. As a result, all external acquisitions have to 
be passed through filters to ensure that technologies 
and online services we utilize have the appropriate 
security controls. 


How do you make sure there aren’t any back doors in 


| software that has been outsourced for development or 
| 


maintenance? 

FOSTER: The only real assurance that back doors 
have not been coded into an application is to con- 
duct code reviews. [That] can be almost as expensive 
as the development costs. If you had to do code re- 
views on all overseas development, it would offset 
the cost benefits of offshoring your development 
work. One answer is to conduct more proactive 


| scans of your network to look for such attacks. 


ZWANG: You have to apply multiple techniques, 
such as monitoring what comes into and goes out of 


| your organization. Make sure that you test access 
| points into your environment to see if experts can 


break in. 


How do you communicate to your chief financial officer the 
steps you're taking to address the security requirements of 
regulations such as the Sarbanes-Oxley Act? 

ZWANG: You have to ask, “Who is the real owner of 


| a business process?” and then work with them to 


gather those security requirements. 

FOSTER: Everything can’t be solved by technology 
or IT controls. We have to challenge business execu- 
tives to make sure we are requiring all business own- 
ers to have better process controls in place. 


What are the key shortcomings you would like to see 
security software vendors address? 

GARVEY: Vendors have been playing catch-up in in- 
formation security for years. Vendors need to spend 
more time meeting with customers to find out what 
their challenges are instead of dealing with that vul- 
nerability after a couple of years. 

ZWANG: One of the biggest holes we have right now, 
which is just starting to be addressed, is device and 
data authentication. It’s not going to be a Holy Grail 
or a silver bullet, but it should be one of the broadest 
jumps that we can make, to know where the device is 
that’s connected to our environment, who it belongs 
to and where the data is coming from. @ 48285 
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Easy Marks and Tough Targets 


VIRTUALLY EVERY Fortune 
100 company boasts its share 
of talented executives. But the 
amount of effort it takes to re- 
cruit them away from their cur- 


rent employers can vary greatly, 


according to executive search 
firm Morgan Howard World- 
wide. The Stamford, Conn.- 


eS) Ss) 


based recruiter recently com- 
piled alist of the easiest and 
hardest companies to crack 
when it comes to recruiting key 
talent. Among the easiest 
marks: Fannie Mae, American 
International Group and Veri- 
zon Communications. Execu- 
tives tend to stay put at Wal- 
Mart, General Electric and The 
Home Depot, says Morgan 
Howard President Marc Lewis. 
“Cash, bonuses and other 
compensation components are 
only one factor in determining 
whether a company is at risk of 
losing its top talent,” says 
Lewis. Other key factors in- 
clude the CEO's ability to con- 
nect with company leaders and 
communicate his vision, the ex- 
istence of an organizational 
structure that recognizes and 
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rewards top-performing talent, 
identification of clear career 
tracks for executive-level posi- 
tions, and leaders who are al- 
lowed sufficient autonomy to 
develop their own ideas 

The companies on the easy- 
target list were weak on at least 
two and often three of those 
factors, Lewis says 


HARDEST 


Career Clip 


THE BURSTING OF THE technology bub- 
ble and horror stories about unemployment 
and offshore outsourcing of tech jobs have 
dampened students’ interest in computer 
careers and fueled a 23% decline in com- 
puter science program enrollments in U.S. 
universities between 2002 and 2003, ac- 
cording to recent report in the Los Angeles 
Times. Jeanne Ferrante, associate dean of 
the University of California, San Diego, 
School of Engineering, told the newspaper 
that the rising jobless rate for computer sci- 
entists and systems analysts over the past 
few years - and the accompanying erosion 
of salaries, bonuses and other amenities - 
have discouraged students. The enrollment 


drop-off is happening just as U.S. compa- 
nies are on the cusp of a hiring resurgence, 
which is prompting concerns about a scarci- 
ty of domestic tech professionals as well as 
a stifling of technological innovation. 

The U.S. Department of Labor forecasts 
46% growth in the number of jobs for com- 
puter software engineers between 2002 
and 2012. 
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their homes. During his career 
with the company, he has held 
PRU Nm ma Cit] 
his way up from a consulting 
role to CIO and then moving 
into his current COO post. 

Ce Cm Um Ae Ca ego) 
PME oe Ue 
professional moving between 
the technical and business 
em RUC ace 


What was your first job in IT? | started 
as a database consultant working with 
small companies. Eventually, | moved to 
ARO and into a full-time position pro- 
gramming database applications around 
a predictive dialer application the compa- 
ny had purchased 


How did you make the move to the 
business side? Was it a gradual tran- 
sition, or did you make a clear-cut 
jump out of heads-down technical 
work to a business/strategy role? The 
move from a strictly IT job to operations 


was gradual, since we had to write and in- 


tegrate other programming to support the 
predictive dialer application. | worked my 
way up to ClO. Eventually | was making 
more and more decisions about opera- 
tions, since IT is the framework for build- 
ing a more efficient and cost-effective op 
eration. As a result of a person departing 
from the operations position, | assumed a 
dual role of ClO/COO. In an organization 
that has less then $10 million in sales, a 
person can play both roles very effective- 
ly. But as we grew, my CIO role eventually 
was too much with the COO role, and a 
separate CIO was hired 
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With more and more IT work, such as 
programming and application support 
and maintenance, moving offshore, 
do you see the need for purely techni- 
Cal skills on the decline here in the 
U.S.? Yes, | think technical ability alone 
will limit your job choices. However, with 
some business and operations back 
ground, you can be part of the team 
manages any offshore activity 


In your opinion, are there other non- 
technical skills an IT professional 
should hone to ensure continued ca- 
reer success? | obtained an MBA at Uni- 
versity of Illinois, specializing in both IT 


and finance. | believe that more and more 


down with marketing/financ 
departments and speak their | 
and overlay this to IT is very valu 


organizations 


What advantages does your IT back- 
ground and experience afford you in 
your role as COO? Seven years ag 
spearheaded our mc 

ness model for our « 


| was able t 
ons that were t 

this IT background with my business and 
telecom know to develop a business 
model f : ; ¢ sles 
the mercy of IT [which is 
this cannot be done or that c 
Jone. Instead, | tell r 


will be done with a 


What advice do you have for IT pro- 
fessionals looking to move into a hy- 
brid position that requires business 
skills? | would suggest taking 
Jate courses in mart J. 


yperations. These c 


some arad- 


¥ to become more well 
ess. You will underst 
rot the center ot tne universe incte: 
products and services grow ar 
tion. You can ha 
network and systems, but wi 
ing revenue from customers, you have 
nothing. An IT professional who can think 
like a marketing person in an IT shell will 
be a great asset to many businesses 
across many industries. @ 48418 
Julia King 
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CONTRACTS 


DePauw Inks 
Online Music Deal 


Online music retailer MusicRebel- | 


lion.com, a division of Digonex 
Technologies Inc. in Indianapolis, 
announced that it will offer all 
2,300 DePauw University stu- 
dents legal music through its 
Web-based platform on a pay- 
per-download basis without any 
added fees. The company will 
donate 1% of all sales back to 
Greencastle, Ind.-based DePauw 
for student scholarships. 


Imerys Picks 
AT&T for VoIP 


AT&T Corp. has secured a three- 
year, $2.25 million contract to 
provide Paris-based mineral 
processor Imerys with IP-based 
data and voice networking ser- 
vices. Under the deal, AT&T will 


connect approximately 50 Imerys | 


sites worldwide using its Global 
Managed Internet Service, allow- 
ing Imerys employees to share 
mining management systems 

in real time. AT&T also provides 
Imerys with local, long-distance 
and international voice service, 
as well as audio- and video- 
conferencing services. 


Santa Clara Signs 
Outsourcing Pact 


Dynamic Systems Inc., a Los An- 
geles-based technology and ser- 
vices provider, announced a five- 
year contract with the county of 
Santa Clara to manage its Sun 
Microsystems Inc. assets and 
service contracts. The contract 
also includes presales configura- 
tion, asset tracking and postsales 
integration and configuration. 


Boston College 


| 
| 
| 
| 


Picks Dell Latitudes | 


Dell Inc. announced a three-year 


agreement with Boston College to | 


offer students wireless-enabled 
Latitude D600 notebook comput- 
ers via the online college book- 
store. The program replaces a 
previous arrangement with IBM. 


BART PERKINS 


Objectivity: 
Dontt Settle for Less 


ODAY, IT’S VERY DIFFICULT to get objec- 
tive advice regarding IT direction and 
strategy. Many of the firms that used to 
specialize in IT strategy work are now 
owned by large systems integrators or 


computer manufacturers. 
To make matters worse, 
many IT suppliers now of- 
fer referral fees to firms 
that recommend their 
products and services. So 
much for objectivity. 
Years ago, there was 
much more market frag- 
mentation: Strategy firms 
dispensed advice, systems 
integrators built systems, 
outsourcers ran data cen- 
ters, and manufacturers 
delivered hardware or soft- 
ware. There was no “one- 
stop shopping.” On the pos- 
itive side, the customer got 
objective advice. On the 
negative side, since the : 
strategy firms didn’t have delivery ex- 
perience, their time and cost estimates 
were sometimes inaccurate. In addi- 
tion, poor communication among the 
companies involved often resulted in 
misinformation, much like the old 
game of “telephone.” These discon- 
nects could cause expensive mistakes. 
All parties believed that tighter link- 
age would offer benefits: 
® Customers felt that they were 
more likely to have new systems deliv- 
ered on time, on budget and with high 
quality if the people who built the plan 
were also responsible for executing it. 
@ Strategy firms wanted to grow. 
They saw that systems integration 
companies were getting 10 to 20 times 
as much revenue for implementing the 
plan as they were for building the plan. 
@ Systems integration firms felt that 
if they worked with senior executives 
to establish the strategy, they would 


| 





get more implementation 
work. 

® Manufacturers viewed 
systems integration as a 
new line of business that 
would help them sell 
more of their traditional 
IT products. 

End-to-end integration 
appeared to meet every- 
one’s objectives. Therefore, 
some of the manufacturers 
and systems integrators 
began to acquire strategy 
firms: CSC acquired Index, 
EDS picked up A.T. Kear- 
ney, and Nolan, Norton & 
Co. was acquired by KPMG 
Peat Marwick. Other com- 

= panies, such as Andersen 
Consulting, started their own strategy 
groups. IBM did both. 

Large companies that have their 
own strategy groups often use IT 
strategy and planning projects as loss 
leaders. They offer to do the planning 
work (worth hundreds of thousands of 


dollars) at minimal cost in order to get 


millions of dollars of hardware sales or 
systems integration work. Unfortu- 
nately, these plans often specify partic- 
ular hardware, database software and 


| application packages or services that 


can be performed only by their own 
company. So much for objectivity. 
As a result of the industry consoli- 
dation, there are very few firms that 
can dispense truly independent ad- 
vice, but they’re out there if you look 
hard enough. When searching for 
objectivity, keep these tips in mind: 
® Look for an independent “bou- 
tique.” Although sometimes difficult 





| to find, these still exist. They are best 


found through referrals from people 
you trust. 

@ Draw a clear line between strategy 
and implementation contracts. To en- 


| sure objectivity, make the firm that de- 


velops the strategy ineligible to bid on 
the implementation. If you can’t find 
an independent boutique, hire a big 
company but specify contractually 
that it will not be allowed to bid for 
resulting implementation projects. 

® Demand contractual indepen- 
dence. In all cases, put language in the 
contract specifying that the firm de- 
veloping the strategy and plan is not 


| allowed to receive any referral or 


other fees from the suppliers they 
recommend. 

® Monitor progress objectively. For 
large programs, consider retaining an 
independent firm to periodically mon- 
itor progress. 

My dad taught me to “measure 
twice; cut once.” That applies here as 
well, but on a much grander scale. If 
you already have an IT strategy from 
a large, multipurpose company, or if 
your CEO requires you to use a com- 
pany for political reasons, hire an in- 
dependent firm to provide a second 


| Opinion. A mistake in today’s market- 


place is prohibitively expensive; an in- 
dependent opinion is well worth the 
cost. Just make sure the firm’s staff is 
senior enough to have the breadth and 
depth of experience needed to accu- 
rately assess the validity of your IT 
strategy. Don’t hire a firm that will cut 
costs by using a horde of recent col- 
lege graduates. 

Your IT strategy has an enormous 
impact on your business. It deserves 
and demands objective decisions as its 
foundation. Leverage your decision- 
making process by soliciting objective 
outside advice. @ 48294 
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Senior Developer (NYC) Defin 
scope of overall rational data 
base modeling projects 
Develop & implement project 
strategy & architecture, produc- 
tion schedules, projections & 
budget for assigned tasks and 
oles. Oversee installation, con 
figuring & tuning of SQL Server 
6.5, 7.0 & 2000 databases 
servers & Oracle. Analyze & 
evaluate existing & proposed 
systems. Develop computer pro- 
grams/systems & related proce- 
dures to process data. Provide 
comprehensive analysis for 
clients, prepare program specif 
cations, diagrams, develop cod- 
ng logic flowcharts, & test to 
ensure proper system perfor 
mance Prepare detailed 
progress reports for manage 
ment & schedule projects for 
deliverable reviews & Quality 
Assurance sks 

Comp Sci, or any 

ed field and relevant experie nce 
required. Send resume to Devon 
Archer, President, Sitaro Group 
48 Wall St., #1100, NY, NY 
10005 


TECH. PERSONNEL 
RECRUITING MGR 


Work closely with client & p 
ject mgrs, assess technical 
resourcing rqmnts of info. tech 
nology projects for animation 
retail, semiconductor & finance 
industries. Seek out, interview & 
screen computer professionals 
with appropriate skill sets. Train 
software consultants on func- 
tional aspects of Enterprise 
Resource Planning & Customer 
Relationship Management pack- 
ages. BS in Comp or 
Engnrg + 2 yrs exp. in job 
offered or as a Tech. Recruiter 
reqd. Must have exp. in fun 
tional aspects of SAP HR 
Biueprinting, Siebel, PeopleSoft 
Maya, Kondor and IEF technolo: 
gies skill sets. High mobility pre- 
ferred. 40 hrs/wk, OT as reqd, 8 
am Sf $54 ,597/year. 
Submit to: Manager. 
Butler ounty CareerLink 
Pullman Commerce Center, 112 
Hollywood Drive, Suite 101 
Butler, PA 16001-5699. Piease 
refer to Job Order No. WEB 
440046 


SW Engineer - As member 

s/ware development team, d 

sign & develop call control 

ware. Analyze s/ware require 

ments & functional spe: De 

sign, code & test 

Control functiona! 

translations, CLASS 5/4 Servic 
AIN basic Call Model, mes: 

saging & 


Participate in design & code re 


ciated protocols 


views. Maintain existing s/ware 
systems. Test & integrate tele 
com products. Must have BS in 
Computer Engineering, Com 
Sci, EE or equiv, + 2 yrs exp 
job offered or 2 yrs telec 
s/ware elopment exp. Mt 
have knowledge of internet pro. 
tocols & the following telecom 
tools: CVS, GNU, LYNX, UNIX 
INET & HAMMER, as well 
strong coding skills 

wk. Salary: $75,000/yr 

copies of resume to 
200300199, Division of Career 
Services, Labor Certification 
Unit, 19 Staniford St., 1 


Boston, MA 02114 
SRCT Inc. is seeking a 
Software Engineer 
experienced on 
AS400, DB2, COBOL, 
RPG. Please respond 
to Mr. Faiz, 3213 
Ridgecane Rd, Lex- 


ington, KY 40513 


W080904E/W/MW 
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SW Engineer (Technical Servic- 
es) - Ensure integrity of design 
development, implementation 
testing of communication s/ware 
for company's cutting edge tele- 
com products. Resolve complex 
problems caused by anomalies 

one or more of telecom s/ware 
or network sub-systems. Repro- 
duce problems in lab to isolate 
s/ware problems affected 
module(s). Develop interim solu- 
tions to problems encountered 
in the field. Assess ways to 
enhance product reliability & 
serviceability. Recommend ap 
plicable process improvements 
to enhance service delivery 
offerings. Work closely w/Sus- 
taining Engineering to obtain 
root cause analysis of reported 
anomalies. Must have BS in 
Computer Engineering, Comp 
Sci, EE or equiv,+ 2 yrs exp in 
job offered or 2 yrs exp recreat- 
ing, diagnosing & solving com 
plex problems in telecom or data 
networks. In-depth knowledge of 
one or more telecom protocols 
(i.e. SS7, TCP/IP, etc.); scripting 
languages (i.e. TCL/Expect, UN- 
IX shell programming, or PERL 
as well as C or C++) & telecom 
testing tools & equipment. 40hrs 
wk. Salary: $82,000. Send 2 
copies of resume to: Case# 
200300203, Division of Career 
Services, Labor Certification 
Unit, 19 Staniford St. 1st FL 
Boston, MA 02114 


Software Analyst/ Business 
Development Manager: Duties 
nciude gathering requirements. 
doing business analysis and 
proposing solutions for IT needs 
of healthcare and pharmaceuti 
al industry. Will build and lead 
team develop and customize 
software dealing with clinical tri- 
als for the pharmaceutical indus- 
try. Requirements Bachelor of 
Science degree in Science 
Technology Field or equiv 
and 1 year coursework in medi- 
cine or pharmacology required 
Must have 3 yrs. exp. software 
analyst/business elopment 
manager or 3 yrs. exp. in mar 
keting < or research in the IT 
field. Since TechNation has 
tients located in several states 
and since assignments are of 
andidates 


temporary 
r willi to move fr 


cation to location for assigr 
t duration that varies from 3 


mos. to year Email CV tc 
rtroff@tnscinc.com, Rona Troff 
HR Mgr of TechNation Software 
Consulting, Inc., or mail to 300 
N. Dakc Avenue, #505B 
Sioux Falls, SD 57104 


Database Administrator 
needed. Responsible for 
providing technical leader- 
ship for 
Oracle database 
ment. Must have B.Sc. in 


organization's 


environ- 


computer engineering and 


yr. experience. Mail 
resume to Gerrie Teddy @ 
ITS, 2500 City West Blvd 
Ste. 2400, Houston, TX 
77042 or email to 
gteddy@itsinc.com 


Simplex Info Systems 


Senior System Analysts 
Analyze, design, develop, test 
implement, maintain and sup- 
port application software using 
COBOL, PL/1, MQ Series, IMS 
DB/DC, J2EE, SAS. Requires 


Bachelors in Computer S 


ence/Engineering or Related 
and 2 years experience 


Send resume to: HR Manager. 
Simplex Info Systems, Inc. 76 
Northeastern Bivd., Suite 32C 
Nashua, NH 03062, or email 
to: resumes@simplexinfo.com 


IT Network Engineer - Assist in 
analyzing local & wide area net 
systems. Plan/desi LAN 
MAN, & WAN networks utilizing 
Shared/Switched Ethernet, Gib 
abit Ethernet, FDDI, & Token 
Ring, in addition to: TCP/IP, IPX 
SPX, SNMP, DHCP, AppleTalk 
X.25, ATM, & Frame Relay, RIP, 
OSPF, IGRP, EIGRP, B SL 
802.1q, VTP 1 
solving 

lems to ob 
all platf 
transfer, multimedia 
ferencing. Prov 

rk systems using 
above protocols, Network Ana 
zer, channel coding & tra 
sion the ymt systems 
codes, digital electronic signals 
& switches, Boolean algebra & 
reduction techs, arithmetic oper 
ation & circuits, cc converter 
multiplexers, & 
Select op systems, protocol sts 
& configuring comm media us 
ing bridges, routers, gateways 
transport media, TCP/IP, IPX. 
SPX, & SNA. Provide network 
modeling & simulatic assis 
tance to deliver client/server app 
functionality. BS Comp Sci, Eng 
or related & working/theoretical 
knowledge of LAN, MAN, WAN 
networks, Shared/Switched Eth 
ernet, Gigabit Ethe 
Token Ring topologies 
IPX/SPX, SNMP, DH¢ 
Talk, X.25, ATM, & 
RIP, OSPF, IGRP, E 
ISL, 802.1q, VTP, 
cols, Network Analyzer. channe! 
coding, knowledge of digital 
electronic signals/switches 
Boolean algebra & reduction 


>muitiplexers 


techniques, arithr ration 
& circuits, code convert 
tiplexers, demultiplexe 

es, routers, gateways 

media & A. $65,300/yr. M-F 
40 hrs/wk 

have proc 

work permanently 

cation by resur 

force Dev 

PO Box 

802( 


ynmental « 
ng firm with err 

remedi 

Ss seeking a 

ministrator. Re: 

tegrated d-bases 
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such as the Bunker H 

fund Site, work with 

EPA Scientists, Ci 

& proj 


& restorat 
computer techr 
such as MS-SQL 
ASP commu: 

VB scripts, SA 
ArcGIS, E 
2000. Reas 
Enginr'g 
rel. exp. in 
& remed atio n 


evaluated € 


Engineer 

design 

Channe 

fabr 

nclude bache 

science and 

ware engineer 

2000 and NT 

including one ye 

Channel switch 
Requirements also 

working knowledge 

Channel analyze 

party HBAs and 

ment utitities 

resume to Kari Hill, McData, 380 
Interlocken >rescent 
Broomfield, CO 800 


Computerworld + InfoWorld 


Laer Buoales 


Computer Solutions 


ead 


Computer Programmer; 40 
hrs./wk. 7:30am-4:30pm M-F 
$54,000/yr. Develop and en 
mputer programs and 
support systems fo 
yee benefit plans using 
third generation structured pro- 
gramming languages & Win- 
dows based technologies; web- 
site develo t both dynami 
database driven & static page 
websites including designing 
testing, and implementing of 
same; add new options to exist 
programs; document large 
projects defining new programs 
enhancements, database struc 
ture, database administratio 
and system flow using MS W 
and Visic confer 
and oc 
grams 
commun 
garding changes made to pro- 
grams and facilitate training 
required to use new or modifie 
programs; stay current on new 
technology items by 
attending seminars & continuing 
Req. Bach. or 
mputer Science 
mmerce, Business Ad. 
& 2 yrs. exp. as 
Software Systems Analyst, Sys 
tems Engineer, Software Con 
Itant or comb. Work exp. must 
nclude 2 yrs. With Visual Basic 
6, Structured Query Language. 
Transact SQL for Microsoft SQL 
Server 7, ASP coding 
application development, D. 
Modeling, Visual Stud 
base Design & Administration 
HTML, DHTML Javascripts, VB 
script 
ADP, COM, Visual C++ 
page, Flash, Adobe Photosh 
Packaging and deploymen' 
ponents of Visual Studio. Send 
resumes to Michigan Depart- 
ment of Career Development 
P.O. Box11170, D MI 
48202-117( f. #2 03 & 
social security # w/ Resume. 
Employer Paid Ad 


SOFTWARE ENGINEER tc 

vide on-site 

Jesign and develop be 
software in real-time 

systems using VxWorks operat 

ng system, socke ogram- 

ming, TCP/IP network protocol 

en UNIX platform. Require 

Bachelor's r Dor 

Science/Engineering and 

years expe 

offered or any ex 


duties. 40% travel te client 
within the United 

required alary: $68 

year, 40-hours/week, 8:30 am to 
5:30 pm. Apply with resume to 
Human Resource Manager, 4C 
Solutions, Inc., 1201 7th Street 
East Moline, iL 61244 


Network World 


JOIN THE $300 BILLION 
COMPUTER SERVICE BUSINESS. 


eur Mogazine’s “HOT 100 


Franchises” 


“FAST 55” 


4 eshasabny 


Senior Consultant 


(Glen Milis, PA and 
tions thro 
States Mana age a team 
and consulting resources 
AP irr 
with a particular fo 


2mpanies in the mai 


turing industry. Perform 
quired SAP 
sole) 
Prepare 
tions, unit and 
scenarios. Des: 
implement, and test t 
for Inve y, Ware 

t and Shipp: 


house 


tior 


Software Engineer 

York, NY) wanted for desigr 
and development 

tier enterprise and web 
based systems. Must 
Bachelor's degree vad 
Computer Science or; 
Electrical Engineering and 
5 years experience. M 
be authorized to work in the 
U.S. Send resume to Meg 
Lyons, TradingScreen, Inc 
5 Union Square West, 4th 
Floor, New York, NY 10003 


August 9, 2004 


1 syste 
Managers 
hain exe 


Develop/ma 
databases 

trieve & analyze data u 

Unix &/or DOS-based 
v9.6f/g; develop, m 
maintain accounti 

geting syster 

network administ 

MS Windows based com- 
puters. Req 4 yrs work exp 
in job offered. Send resume 
to BKN and S Partnership, } 
2920 Clairmont 

Atianta, GA 30329 





SW Engineer - Design & develop 
call control s/ware. Analyze si 
ware requirements & fu ional 
specs. Design, code & test criti- 
‘al Call Control functionality in- 
cluding: translations, CLASS 5/4 
Services, AIN basic Call Model. 
messaging & associated proto- 
cols. Participate in design & code 
reviews. Maintain existing s/ware 
systems. Test & integrate tele 
com products. Must have Bach in 
EE, Comp Eng'g/Sci, or other re’ 
t field, + 2 yrs exp in job of- 
fered or 2 telecom s/ware de- 
). Must have know- 
. nternet Protocols, as 
| as tele tools such as 
INET & GDB able candidat- 
© have strong coding 
C programming lang- 
sage. 40hrs/wk. Salary: $80,000; 
yr nd 2 copies of resume to 
C 300205, Division of 
Career Services, Labor Certifica 
tion Unit, 19 Staniford St., 1st FL 
Boston, MA 02114 


PROG. ANALYST - 
SYSTEMS ADMIN. 
Install new software releases 
system upgrades & software 
patches. Perform system back- 
) & recovery. Maintain data 

& monitor system config. to 
a integrity. BS degree 
Sci., Electrical or Elec- 
cs Engnrg + 2 yrs exp. in job 
offered or as a Software Engnr 
S Admin. reqd. Exp. must 
ide er ad programmi 
P&H protocols; Citrix or 
AIX and Solaris 9.0; Macola 
ERP & Reuters Kondor soft- 
are; & Production DBA in 
3, Sybase 12.5 and SQL 
Servers. High mobility preferred 
40 hrs/wk, OT as reqd, 9 am 
$66,730/yr. Subm 
r, Butle unty 
Pullman Commerce 
112 Hollywood Drive 
01, Butler, PA 16001- 
9. Please refer to Job Order 
441381 


Software Engineers Needed 
Seeking qual. candidates pos 
sessing MS or equiv. and/or rel 
work exp. Part of the req. rel 
work exp. must include 3 yrs 
working w/Oracle Technolo- 

Duties include: Support & 
applications 
e-business suite components 
HR, PAY, OAB, OTL, OIC, AP, 
AR, GL, INV, PO & OM. Work 
w/Oracle, PL/SQL, Developer 
Discoverer, & Workflow Builder. 
Send resume, references & 
salary requirements to: Exxor 
Inc., 8374 Market St., #161 
Bradenton, FL 34202 


Computer Touch, LLC, is 
looking for a Programmer 
Analyst to develop and test 
Java features, administer 
Unix Accounts, create client 
websites for e-commerce 
and integrate and test GUI 
interface, and develop node 
to node routing protocols for 
wireless networks. Please 
send all resumes. to 
Computer Touch, LLC 
9 Belgravia Terrace 
Farmington, CT 06032 
Atten: Human Resources 
Dept 
Convergence Network 
Specialist, Hauppauge, NY. 
Install and maintain Voice 
over IP phone systems. 2 
yrs in job exp. req'd 
Resume only to bg@ctnet- 
works.net or CT Networks, 
125 Wireless Blvd 
Hauppauge Technology 
Center, Hauppauge, NY 
11788 Attn Barry 
Goldstein 


IT|cCareers 


Softline Systems, inc is seeking 
qualified individuals to work at 
client sites throughout the 
United States. We have open- 
ings for the following positions 


Oracle Programmer Analyst to 
develop various applications, 
user interface and database pro- 
grams using Oracle, PL/SQL 
and SQL 


Data Warehouse Programmer 
Analyst to develop data ware- 
house and data marts using 
Business Objects, Oracle and 
PUSQL 


Ab-initio Programmer Analyst 
to develop data warehouse and 
data marts using Ab-Iinitio 
Oracle, SQL and PL/SQL 


Teradata Developer to develop 
Teradata databases 


Apply to: Softline Systems, Inc 
1600 Boston Providence High- 
way, Walpole, MA 02081 


Seeking qualified applicants for 
the following positions in Mem- 
phis/Collierville, TN: Senior Bu 
siness Application Analyst. Act 
as liaison between technical 
developers and users/custom 
ers. Requirements: Bachelor's 
degree or equivalent* in comput- 
er science, math, statistics, busi- 
ness or related field plus 5 years 
of experience in analyzing busi- 
ness systems and developing 
technical automated solutions. 
Experience with SQL, CGI envi- 
ronment and J2EE environment 
also required. “Master's degree 
in appropriate field will offset 2 
years of general experience. 
Submit resumes to Marc 
Blackburn, FedEx Corporate 
Services, 4200 Regent Blvd 

Irving, TX 75063. EOE M/F/D/V 


SW Engineer - As member of 
the s/ware development team 
design & develop network man- 
agement s/ware. Participate in 
design & code reviews. Maintain 
existing s/ware systems. Test & 
integrate cutting-edge telecom 
products. Must have BS in 
Computer Engineering, Comp 
Sci, EE or equiv,+ 2 yrs exp in 
job offered or 2 yrs exp in tele- 
com s/ware development, "C" 
coding. Must have exp w/Lynx & 
LINUX, GDB, SmartBits & ATM 
Modules. 40 hrs/wk. Salary 
$93,000. Send 2 copies of 
resume to: Case#200300204 
Division of Career Services 
Labor Certification Unit, 19 
Staniford St., 1st FL, Boston, MA 
02114 


Software Developer III. B.S. in 
Comp. Sci. or rel. field + 3 yrs 
complex programming exp 
w/ASP, VB, & MS Access. 
Exp. w/HTML, JavaScript, & 
structured analysis & dsgn 
methodologies. Ability to write 
complex SQL  querries 
Demonstrated knowl of rela- 
tional d/bases & object orient- 
ed methodologies. Resumes 
to Erica Petersen, 4800 
Westown Pkwy, #300, West 
Des Moines, !A 50266 


PROGRAMMER ANALYSTS 
for Overtand Park, KS office 
Develop & maintain software 
applications using Orbix 
J2EE, MKS, TEMIP, Inter- 
woven, Coolgen, Metrica, Net- 
rac, Tuxedo, Tango, Eclipse 
CORBA, RMI, RUP. Bachelors 
Degree reqrd in Computers 
Engineering or related field + 
2yrs of related exp. 40 hrs/wk: 
Must have legal authority to 
work permanently in the U.S 
Send resume to HR Manager, 
Spectrum Informatics Inc, 
11936 W 119th St., #141 
Overland Park, KS 66213 


Computerworld + InfoWorld +» Network World + August 9, 2004 


SW Engineer - Design, code & 
test features for cutting edge 
telecomm products. Modify pro- 
duct features to ensure confor- 
mance to ANSI specs. Analyze 
& fix bugs in system as they 
arise at various customer sites 
Must have Bach. in Computer 
Science/Engineering, Electrical/ 
Electronics Engineering, + 2 yrs 
exp in job offered or 2 yrs tele- 
com s/ware development exp. 
Must have exp in telecomm &/or 
data networking industry, in- 
clud'g exp w/SS7 technology. In- 
depth knowledge of one or more 
telecom protocols required. 40 
hrs/wk. Salary: $80,000/yr. Send 
2 copies of resume to: Case# 
200300200, Division of Career 
Services, Labor Certification 
Unit, 19 Staniford St., 1st FL. 
Boston, MA 02114 


SOFTWARE ENGINEERS (12 
positions): require Bachelor's or 
equivalent in Engineering/Com- 
puter Science/Mathematics/Sci- 
ence or closely related field with 
two years experience providing 
skills in described duties, at 
$79,000 per year. Provide on- 
site consulting in design, analy- 
sis and development of software 
for legacy systems in IBM main- 
frame environment; develop- 
ment and administration in Or 
acle, DB2, SQL Server and Sy- 
base; e-commerce and web sys- 
tems development in Microsoft 
Java and related technologies. 
network management systems 
development with Netscape Ser- 
ver and related tools; SAP R/3 
application systems on Windows 
with DOS and ABAP/4 and relat- 
ed modules. 40% travel to client 
sites in the United States. Mail 
resumes to: YASH Technolo- 
gies, Inc., 605 17th Avenue 
Suite 1, East Moline, IL 61244 


Computers - Database Ad- 
ministrators needed. Seek- 
ing qual. candidates pos- 
sessing BS or equiv. and/or 
relevant work exp. Duties 
include: Administer & sup- 
port database development 
& production environment; 
Work with Informix, Sun 
Solaris, AIX, HP-UX, DB2 
UDB & Veritas. Mail resume 
& ref. to: Object Solutions, 
Inc., Attn: HR, 3025 Harbor 
Lane Plymouth MN 
55447-5119 


The new 
itcareers.com and 
CareersJournal.com 

combined jobs 
database can help 

you find one. 

Check us out at: 
www. itcareers.com 


or call (800) 762-2977 


IT|careers.com 
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you have more jobs 
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IT Careers 


Wants You! 


Take the hassle out of 


job searching and 


check us out at 


www.itcareers.com. 


the right skills fuel the 


new economy and IT 


Careers wants you to be 


there. Check us out at: 


www.itcareers.com 





SW Engineer - As member of s/ 
ware development team, design 
& develop call control s/ware. 
Analyze s/ware requirements & 
functional specs. Design, code & 
test critical Call Control function- 
ality _includ’g translations, 
CLASS 5/4 Services, AIN basic 
Call Model, messaging & associ- 
ated protocols. Participate in 
design & code reviews. Maintain 
existing s/ware systems. Test & 
integrate telecom products. Must 
have B.S. in Computer Engineer- 
ing, Comp Sci, EE or equiv, + 2 
yrs exp in job offered or 2 yrs 
telecom s/ware development 
exp. Must have knowledge in at 
least one of the following tele- 
com protocols: Cali Processing 
or TCP/IP, as well as strong cod- 
ing skills in C. 40hrs/wk. Salary 
$78,000/yr. Send 2 copies of res- 
ume to: Case#200300201, Divi- 
sion of Career Services, Labor 
Certification Unit, 19 Staniford 
St, 1st FL, Boston, MA 02114 


COMPUTERS: HCL  Techn- 
ologies (MASS), Inc. has multi- 
ple openings at its corporate 
offices located in Quincy, MA 
and their branch office in 
Tallahassee, Fi. for the following 
positions: Software Engineers; 
Systems Analysts; Programmer 
Analysts; Project Managers 
Account Managers/Sales Mana- 
gers; Sales Engineers; Market 
Research Analysts; Business/ 
Management Analysts; and 
Network Engineers. Salary com- 
mensurate with education and 
experience. Ail positions may 
involve travel or relocation to 
various sites throughout the 
U.S. Send resume to: HCL 
Technologies (MASS), Inc. Attn 
Rajiv Shesh, 400 Crown Colony 
Drive Suite # 500 Quincy, MA 
02169 indicating the position 
you are applying for. 


Infomerica is looking for system 
programmer analysts, software 
project engineers & computer 
consultants working at different 
sites (travel required) using C: 
C++, Oracle, Java, ASP, Unix, 
EJP, ERP, VB, SQL, etc. Must 
have BS/MS with 1-year exp. in 
IT fields. Send resumes to 
info@infomericainc.com. EOE 


Perk Systems, Inc. is looking for 
IT Analyst/Engineers to fill vari- 
ous positions using C/C++, Ja- 
va, VB, Web Tech, Oracle, Unix- 
Sun Solaris, EJB, Rational 
Rose/UML, JSP, OOAD. Candi- 
dates must have MS/BS & IT 
experience. Apply at j 
perksys.com. Travel maybe 
quired. EOE 


Optimal Solutions Integ- 
ration, Inc. has multiple 
openings for SAP and i2 
Consultants, Software Anal- 
ysts and System Analysts in 
our Irving, Texas and 
Washington, DC offices 
Please send resumes with 
salary history and require- 
ments to Optimal Solutions 
Integration, 8445 Freeport 
Parkway #240, Irving, TX 
75063. Open to GreenCard 
holders or US Citizens 


Programmer/Analyst - Software 
Art Corp., a software-consulting 
firm, requires software profes- 
sionals with dernonstrated 
hands-on experience in the fol- 
lowing: Client Server: MS VB 
NET, ASP .NET C#/C++/Oracle 
/Sybase/Windows/Unix DBA 
Sybase/SQL Server Internet 
Computing: JAVA/CORBA/XML. 
JAVA Websphere/Weblogic 


QA Testers: Manual/Automated 
Business Analyst, National Ac- 
count Managers SAS Program- 
mers. Send resume to 


Software Art Corporation 
iowa@softwareart.com 


alee BMeles eS 


Managing Director 
Coordinates R & D in Grid 
Computing. Plans/formulates R 
& D proposals. Responsible for 
Strategic technology innova- 
tion/development/strategic pian- 
ning process to balance mis- 
sion/markets. Oversees launch- 
ing of new technologically inten- 
sive products. Uses knowledge 
of federal government contract- 
ing regulations, incl. proposal 
development/pricing/project 
mgt. Uses knowledge in com- 
Puter/communications networks/ 
grid computing. Utilizes strong 
problem-solving ability. Collab- 
orates w/colleagues/scientist/ 
administrators. Conducts media- 
tion to resolve disputes/manage 
competing organizationai iss- 
ues. Uses business/marketing 
skills. Represents MCNC to aca- 
demic/government/commer- 
cial/professional constituencies. 
Req Ph.D Mathematics 
Physics, Computer Science or 
related field, and 3 yrs exp. in 
job offered or 3 yrs exp. in 
Management of R & D in Grid 
Computing. Hrs. 8 am to 5 pm 
Send Resume to MCNC, Attn: 
Virginia Graves, PO Box 12889 
Research Triangle Park, NC 
27709-2889 


Technical Consultant: Interface 
with users(Iinternal and external) 
t0o define system requirements 
and determine modification nec- 
essary for effective product 
Write code, complete program- 
ming and test debug applica- 
tions. Complete documentation 
and procedure for installation 
and maintenance of product 
Analyze design program 
Troubleshoot, debug and modify 
local, network or internet-related 
computer programs for commer- 
cial or end user applications 
such as Process engineering. 
financial, Insurance manage- 
ment or desktop applications 
product. Must have Multi 
Platform environment experi- 
ence, Manuai and automated 
testing experience and relation- 
al database experience and 
scripting experience. B.S in 
Comp Science or equivalent and 
2 years experience in job 
offered. 40hrs/wk (9:00 a.m. to 
5:00 pm) $80,878.00/yr. Please 
send two (2) copies of 
resume/ietters to Job Order 
#2004-174. P.O. Box 989. 
Concord, NH 03302-0989. 


SW (Test) Engineer - As mem- 
ber of s/ware testing team, test 
& develop test automation s/ 
ware. Participate in design & 
code reviews. Write test plans 
according to system reqs. Main- 
tain existing test plans & auto- 
mated test scripts. Test telecom 
products. Support potential cus- 
tomers during lab trials. Must 
have BS in Computer Engineer- 
ing, Comp Sci, EE or equiv, + 2 
yrs exp in job offered or 2 yrs 
exp w/s/ware testing for the tele- 
com industry, including detailed 
knowledge of telecom protocols, 
general telecom procedures, & 
scripting. 40hrs/wk. Salary: 
$75,000. Send 2 copies of res- 
ume to: Case#200300202, Divi- 
sion of Career Services, Labor 
Certification Unit, 19 Staniford 
St., 1st FL, Boston, MA 02114 


Infobahn Technologies de- 
livers innovative IT Solu- 
tions to business clients 
nationwide. We have im- 
mediate full time opportu- 
nities for Software Engin- 
eers. All applicants must 
have a minimum BS in 
Computer Science Engin- 
eering or Related field plus 
2 years of experience. 
Send resumes to: 
Infobahn Technologies, 
(HR) 288 Walnut St. #410 
Newton, MA 02460. 


IT PROFESSIONALS 
Senior Consultant 


(Glen Mills, PA and other locations throughout the United States) 
Responsible for designing appiications in the Telecommunications indus- 
try including implementation and testing of Siebel and WebMethods. 
Gather requirements, design and build modules in Siebel and build func- 
tionality for the data integration from Siebel to back-end applications uti- 
lizing Workflow Processes, Workflow Policies and Business Services 
Responsibie for gathering requirements and design for data integration in 
Web Methods between various front-end applications and back-end appli- 
cations utilizing High Level event flow, Low Level event flow and Data 
structure mapping between applications. Responsible for custom coding 
in Visual Basic, e-Script, and Java and design and build project status 
applications in Microsoft Access using Visual Basic. Design and build 
Siebel modules using e-Script for Accounts and Contacts functionality 
while integrating data from Siebel to back-end applications. Design and 
build Java applications to test data integration between front end and 
back end applications and Java applications to log data flow in 
WebMethods. Responsible for designing and configuring billing modules 
in Arbor/BP to present billing information from Arbor/BP to front end appli- 


cations. 


The wage offered is $75,780/year. The work schedule is Monday-Friday 
9:00am-5:00pm. The minimum requirements are as follows: Bachelor's 
degree or equivalent in Engineering (any), Information Systems 
Computer Science or Mathematics plus 3 years experience in the job 
offered or 3 years experience as a Senior Consultant, Consultant, or 
Systems Analyst. Empioyer will regard a foreign degree to be equivalent 
to a U.S. Bachelor's degree as determined by an accredited credentials 
evaluation service. Related experience must also include at least 1 year 
of implementation or testing of Siebei & WebMethods, custom coding in 
Visual Basic, e-Script, and Java, and designing and configuring billing 


modules in Arbor/BP 


Please send your resume, referencing Job Order Number WEB439173 to 
the: PA CareerLink, FLC Unit, 235 W. Chelten Avenue, Philadelphia, PA 


19144. EOE 


Business Analyst sought by Fair- 
field, CT Outsource Service Prov- 
ider Company. Duties: Analysis of 
new business requirements and 
product enhancement. Synthesis 
of new business requirements in- 
to detailed technical product dev 
elopment specifications. Monitor 
ing and management of the entire 
cycle of ongoing development 
Projects, including scheduling 
code delivery. functional and ov 
erall testing, and deployment into 
our production environment. Ana- 
lysis and resolution of technologi- 
cal and business-logic related is- 
sues. Management of our Qui 
Assurance team. Must have ex- 
perience in and knowledge of da- 
tabases SQL, N-tiered applica- 
tions principles, ASP and VB pro- 
gramming Object-oriented analy 
sis and design, Unified Modeling 
Language, Automated testing 
tools and bug tracking software 
Must interact and communicate 
with the back office employees of 
Our sister company who are bas- 
ed in Uzbekistan. Must also have 
experience in dealing with finan- 
cial markets, banking principles 
and accounting. Job to be perfor- 
med in Fairfield, CT and various 
unanticipated clients sites in the 
U.S as assigned. The selected 
candidate must be able to conv- 
erse, read and write in the Rus- 
sian language. Req. A Bachelors 
Degree or Equivalent, in either 
Applied Math/Comp. Sci., Busin- 
ess or Economics, and two years 
of experience in the job offered or 
related occupation.. Hours: 9:00 
AM to 5:00PM, Mon-Fri, 40 hrs/ 
wk. Apply to, ATTN: BA Position 
Foundation Source Philanthropic 
Services, Inc., 55 Walls Drive, 3rd 
Fir., Fairfield, CT 06824 


V.L.S. Systems is a software 
development and consulting co 
with multiple openings for Soft- 
ware Engineers, DBA's, Pro- 
grammer Analysts, QA Testers 
Financiai Analysts and Project 
Managers to work at client sites 
in VA, IL, PA and other sites 
throughout the U.S. Individuals 
must have a minimum of a 
Bachelor Degree and two years 
relevant experience. We are 
seeking individuais with various 
combinations of the following 
skills i: Siebel, Oracle Apps, 
Peopiesoft, SAP. MS SQL, 
SCADA, DB2, Sybase, Abinitio. 
Tuxedo, OLAP, ETL develop- 
ment, Business Miner, VSAM 
Mercator, Endevor, SeeBeyond 
C#, C++, VC++, ASP.NET, .net 
technologies, Business objects, 
Java, J2EE, JND!, Java Script, 
EJBs, Coldfusion, Peri, HTML, 
Cobol, CICS, MVS/ESA, Unisys, 
COM+, MTS, Cognos, Web- 
sphere, Weblogic, WSAD, 
MVC Architecture, Unix, Win- 
idows NT, embedded related 
tools. Apply to: V.L.S Systems, 
9900 Main St, Suite. 304 
Fairfax, VA 22031 


Computerworld + InfoWorld - Network World - August 9, 2004 


Sr. Oracle DBA sought by office 
products distri ion company im 
Broomfield, CO to work in 
Broomfield and other unantici- 
pated job sites in the U.S. to ata 
senior level, design nstall 
maintain, and administer large 
(10+ CPUs) OLTP ORACLE 
relational database manage- 
ment systems in a UNIX clus- 
tered environment. Design the 
architecture and physical infra 
structure for the ORACLE rela- 
tional database management 
systems. Design and establish 
physical data parameters 
Engage in performance tuning. 
Create and implement security 
and back-up and recovery pro- 
cedures. Provide user support 
and training. Engage in project 
management and design related 
software applications as 
required. Requires master's or 
equivalent. Master's or foreign 
equivalent in comp. sci 

eng or related field or bachelor's 
or foreign equivalent in comp. 
sci., elec. eng or related field 
plus 5 yrs of software database 
administration experience;1 yrs 
Oracle database administration 
experience; 2 yrs exp. may be 
concurrent with the 5 yrs exp 
required for the equivalence to a 
master's described above; work- 
ing knowledge of designing 
database architecture and phys- 
ical infrastructure, and perfor- 
mance tuning of large OLTP 
(10+ CPUs) ORACLE relational 
database management systems 
in a UNIX clustered environ- 
ment.M-F; 8am-5pm,$92,500/yr 
Respond by resume to 
Employment Programs, PO Box 
46547, Denver, CO 80202 and 
respond to JON CO 5085898 


Radian Information Systems is 
seeking system analysts, soft- 
ware engineers & IT consultants 
to work on ERP. data ware- 
house, mainframe using SAP. 
PeopleSoft, VB, ASP. Java 
Script, VSS, VBScript, Web 
Methods, Cognos, Unix, Oracie 
etc. BS/MS with exp. Contact 
Info@RadiantinfoSys.com. EOE 
IT specialists wanted by 
ARWANO, Inc. for positions 
using Oracle, SQL, VB, C/C++ 
SAP, AS/400, RPGLE, COBOL/ 
400, CL, SQL/400, Query/400. 
Oracle RDBMS, Developer 
2000, Windows NT. Minimum is 
BS degree with IT experience. 
Travel maybe required. Apply at 
waseem@arwano.com, EOE 
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Manager, IT Audit - Milwaukee, Wisconsin 


Coordinates, manages and directs all aspects of active Information 
Technology (IT) audit projects throughout the company. Coordinates audit 
efforts within the Internal Audit department, including the general audit 
staff. Assigns and manages staff across multiple, simultaneous IT audits 
in various locations as needed. Recruits and maintains a highly qualified 
staff of IT audit professionals and provides the staff with training, guidance 
and growth opportunities. Recommends use of outside professional ser- 
vices to supplement the IT audit staff and participates in outsourcing deci- 


sions. Works with audit management 


and business units to establish risk- 


based audit plans. Ensures that audit results are reported in an objective 
and accurate manner to the appropriate levels of management. Ensures 
the accuracy and clarity of audit results and guides audit staff in the 
preparation of audit reports. Develops and maintains contacts with oper- 


ational, financial and IT executives 
eptance of audit requirements. 


to ensure an understanding and 
approach and reporting. Maintains 


-ontact with external auditors to coordinate internal and external IT 
dit activities and to foster a free exchange of information. Supervises 4 


- 


5 individuals. Domestic and 


international travel required: 50% 


Required is a Bachelor of Science degree in Management Information 
Systems or Computer Science and five years of experience as a 
Manager, !T audit or as an IT Auditor or Analyst. Applicants must have: 
had experience in performing internal or external IT audits to measure 
and analyze IT controls, systems and data security designs, and man- 
agement information systems; had experience in leading and supervising 
other IT Auditors; had experience with the following software and hard- 
ware: UNIX, Windows 2000, PeopleSoft, SAP, Firewalls and other secu- 
rity hardware/software; had experience in performing IT audits in the fol- 
lowing areas: financial (e.g., SAP/PeopleSoft), operational and manufac- 
turing systems, e-business and security vulnerability and penetrations. 
and had experience in developing guidelines and/or recommendations for 
security frameworks and controls. Applicants must possess one of the fol- 


lowing certifications: Certified 


Information Systems Auditor (CISA) 


Certified Information Systems Security Professional (CISSP), and/or 
Certified internal Auditor (CIA). Must have proof of legal authority to work 
in the U.S. Qualified applicants please submit resume including job req- 
uisition #2138BR to M. Taft, P.O. Box 2086, Milwaukee, WI 53201-2086 


Sr. Application Development 
Specialist - Acting at a senior 
level, plans, coordinates and 
implements software application 
development and integration 
activities for directory services in 
a team environment. Works 
closely with customer represen- 
tatives to establish customer 
requirements Will translate 
evel requirements into sys 
tem design and creative solu- 
tions. Performs system design 
development, and installation of 
mplex multi-system applica- 
tions in a geographically diverse 
environment. Will perform sys- 
tem testing and error correction 
Develops conversion plans and 
procedures, and documents ali 
phases of system development 
Will use listed requirements dur- 
ing course of duties. Requires 
Masters Degree in Computer 
Science or Physics plus six 
years of experience in the job 
offered or six years of experi- 
ence as System Analyst 
Requires Implementation expe- 
rience in LDAP-based Directory 
Services with knowledge of pro- 
gramming in schema de! sign 
ntegration with legacy systems 
data replication, and synch ser- 
vices in addition to experience 
with Visual basic, Visual C++ 
MFC, Crystal Reports, Active X 
and SQL Server databases. 
Web programming using multi- 
ple languages. software devel- 
»pment life cycle for enterprise 
application implementations and 
experience with Project Man- 
agement Methodology. In lieu 
a Masters in Computer 
ence plus six years of experi- 
ence employer will accept a 
Bachelors of Science or foreign 
degree equivalent plus eight 
years experience in job offered 
or in systems analysis or related 
field. Salary: $90,591/year, 40 
Hours/week, M-F, 8:00am to 
5:00pm Job Location 
Mechanicsburg, PA. Job Order 
#: WEB 441439. Send resumes 
with reference to job order # to 
Attn: M. Texter, Cumberland 
County CarrerLink, 1 Alexandra 
Court, Carlisle, PA 17013 


SENIOR SYSTEMS SOFT- 
WARE ENGINEER to design. 
develop and test leading edge 
network products, Cisco Routers 
Switches, and test scripts using 
TCL/Expect, Perl, Shell Scripts 
Traffic generators/analyzers, 
routing simulators and packet 
sniffers; Set up and maintain 
UNIX, Linux Servers, Veritas 
Netbackup, Veritas Volume 
Manager, LNSS, EPO, IDS, 
Trend Micro Server Protect and 
IDS management console 
Implement and test vian based 
enterprise networks using multi- 
layer switches catalyst6500: 
Implement networks to test vari- 
ous protocols including BGP, 
IGRP, OSPF and |S-IS; Mentor 
junior engineers and program- 
mers. Require: Bachelor's deg- 
ree in Computer Science, an En- 
gineering discipline, or a closely 
related field with 5 yrs of pro- 
gressively responsible exp in the 
job offered or as a Systems Ad- 
ministrator. Extensive travel on 
assignment to various client 
sites within the U.S. is required. 
Competitive salary offered 
Send resume to: Krishna Mup- 
paraju, Data Matrix Associates. 
Inc., 102 Furlong Court, Frank- 
fort, KY 40601 Attn: Job RK 


Full-time Oracle Applications 
Developer. Responsible for 
design and development of 
applications. Customization and 
production support of Oracle 
applications (11.03/11i) including 
core modules AR, AP, GL, Order 
Entry and Inventory. Work with 
Oracle 9i, forms 6i, Reports 6i 
Oracle Warehouse builder9.0. 
ERWIN 3.0, PL/SQL, Visual 
Basic and web technology (ASP, 
VBscript, Javascript, Oracle 
Portal 3.0). Must have a 
Bachelors degree in Electrical 
and Electronics Engineering or 
related field. Foreign degree 
equivalent accepted. Must have 
four years of experience in job 
offered or position with same 
duties. Send resume to: Jennifer 
Matthews, Global Payments, 10 
Gleniake Parkway, North Tower, 
Atlanta, GA 30328 


SOFTWARE ENGINEER 
(3 positions) 


To design, develop and imple- 
ment complex business SAP 
R/3 applications, focusing on 
PP, PP-PI, MM, QM and WM 
modules, using SAP R/3, ABAP/ 
4, E-Batches, ACSIS, info Pac 
RWD, PI Sheets, Toledo Mettler 
Weigh Scales, OPC Server! 
Interfaces and FDA's Current 
GMP. Attn; Job ST 


To design, develop and imple- 
ment complex business SAP 
R/3 applications, focusing on 
SD, MM and CRM modules, 
using SAP R/3 and ABAP/4 
Attn: Job AB 


To design, develop and imple- 
ment complex business SAP R/ 
3 applications using SAP ABAP/ 
4 programming, BDC, Dialog 
programming, ALE, IDOC, RFC. 
SAP Script, Smart forms, user 
interface and user exits on MM 
WM, SD, FI/CO, PP and QM 
modules. Attn: Job CD 


Require: M.S. degree in Com- 
puter Science, an Engineering 
discipline, or a closely related 
field with 2 yrs of experience in 
the job offered or as a Program- 
mer/Analyst. A B.S. degree with 
five years of progressively re- 
sponsible experience in the job 
offered or as a Programmer 
Analyst or Programmer will be 
accepted in lieu of the M.S. de- 
gree and 2 years of experience. 
Extensive travel on assignment 
to various client sites within the 
U.S. is required. Competitive 
salary offered. Send resume to: 
Chida Barat, Zieta Technologies 
LLC, 34 Oakiey Court, Newark. 
DE 19702 


Programmer Analyst 


Analyze, design, code test & 
document computer software 
using platforms/systems MVS, 
Unix, AIX, NT; languages 
PL/SQL, Shell scripts, Cobol 
C++, Visual Basic, SAS, Java 
databases Oracle, SQL; design 
computer applications for busi- 
ness problems & tech. support 
Req. BS Comp. Sci. or Comp. 
Eng. & 2 yrs. exp. in job or 2 yrs 
exp. as Software Eng. MS in 
Comp. Sc. or Comp. Eng. may 
be substituted for BS & 2 yrs 
exp. Resume to Attn: Human 
Resources-SS, NCCI Holdings 
Inc. 901 Peninsula Corporate 
Circle Boca Raton, FL 33487 
No calls. We require a drug 
screen and background check 
EEO/Smoke Free environment 


PROGRAMMER/ANALYST to 
analyze, design, develop, imple- 
ment, test, maintain and support 
application software in a main- 
frame client/server environment 
using COBOL, SAS, CICS 
MVS, DB2, VSAM, SQL, DB2 
UDB, RDBMS, IMS-DB/DC, 
CSP, C, C++, Visual Basic 
Oracle, Teradata, Informix, File- 
Aid, Easytrieve, Changeman 
Xpediter, Rexx, JCL, Focus and 
Microstrategy under UNIX, AIX 
and Windows operating sys- 
tems. Require: B.S. degree in 
Computer Science/Engineering, 
or a closely related field with 2 
yrs of exp in the job offered or as 
a Programmer. Extensive travel 
On assignment to various client 
sites within the U.S. is required 
Competitive salary offered 
Apply by resume to: Ravi 
Kandimalla, Everest Computers 
Inc., 875 Old Roswell Road, Ste 
E-400, Roswell, GA 30076; Attn: 
Job VB. 
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Software Engineer - 
Tickets.com, Inc., located in 
Costa Mesa, CA, is looking for! 
professionals to design, code & 
test small to medium software 
modules; participate in short 
term planning of IT projects & 
programs, among other duties. 
Reqs: Bachelor's degree in 
Comp Sci, Engg, Math or Tech 
or foreign equivalent; 2 yrs exp 
in job offered or 2 yrs exp in 
related occupations of Progr- 
ammer Analyst, Systems 
Analyst, Consultant, Project 
Leader, Programmer or Progra- 
mmer Trainee. Exp must involve 
Java, HTML, Perl & Oracle. 
Must be willing to travel to work- 
sites _ nationally. Employer 
deems 3 yrs of undergrad study 
+ 1 or more yrs towards gradu- 
ate study as meeting degree 
requirement. 40 hr/wk. Please 
fax resume to HR at 714-327- 
5512 


Computer/info Systems 

Nuclear Security Services Corp 
seeks Systems Application 
Software Specialist based in our 
Willowbrook, IL loc. Analyze 
security reqs for feasibility of 
design within time + cost con- 
straints. Design + dev IT sys- 
tems applics via analysis + mod- 
els to predict + measure out- 
come of design. Dev + direct 
software systems testing proce- 
dures, programming, + docs 
Technical support. Must have 
BS in Comp Sci or related field 
and 1 yr relevant exp. Resume 
to NSSC, attn:Polly Upton, 701 
Willowbrook Centre Pkwy, 
Willowbrook, IL 60527 


Calif based IT co has 
openings at its Torrance, 
CA and Chicago, IL ofcs 
and at unanticipated client 
sites across US for Pgrmr 
Analysts, Sftware 
Systems Analysts, Biz 
Dvipmnt Consultants and 
Biz Analysts Send 
resume with salary reqs to 
RJT Compuquest, 23430 
Haw\thorne Bivd., #305, 
Torrance, CA90505, Attn 
HR 
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itcareers.com 


IT|careers.com 








A Call To Action! 


Take the hassle out of 


searching for the right 


candidate and contact us 


at (800) 762-2977. 


We can place your 


message in front of 2/3 of 


all US IT professionals. 


Call (800) 762-2977 


www.itcareers.com 
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Gateway PCs to Get 
New Chassis Design 


BY MATT HAMBLEN 

Gateway Inc., as part of its 
plans to focus more on busi- 
ness users, last week detailed a 
desktop PC that’s due in the 
fall and could be the first sys- 
tem released with Intel Corp.’s 
new BTX chassis design. 

BTX is expected to eventu- 
ally replace the 10-year-old 
ATX design that’s now widely 
used in PCs. The new chassis 
technology realigns compo- 
nents to maximize cooling. 
Among other things, it fea- 
tures a front fan that is 50% 
larger than the one on current 
PCs but runs more quietly, said 
Ken Loyd, director of business 
marketing at Gateway. 

The primary driver for the 


Continued from page 1 


Biometrics 


private sector has been slow 
to deploy them, mainly be- 
cause of cost, reliability and 
standards issues, according to 
a newly released report from 
Burton Group. 

“Over the next two to three 
years, biometrics will remain a 
niche solution in enterprises 
rather than a technology that 
is deployed to the masses,” the 
report said. And many users 
appear to agree. 

“T think in time, use of this 
technology in the private sec- 
tor will grow,” said David Sta- 
cy, global IT security director 
at St. Jude Medical Inc., a 
$1.9 billion maker of cardio- 
vascular equipment in St. 
Paul, Minn. “I think a lot of 
companies are waiting for the 
prices to come down, and 
there is a sense among securi- 
ty professionals that these 
products have not been per- 
fected yet.” 

Providence Health System 
in Seattle has examined bio- 





development of BTX is the 
fact that the processors used in 
PCs generate four times more 
heat than they did 10 years ago, 
while the heat produced by 
graphics cards is as much as 20 
times greater than it once was, 
Loyd said. 

He added that Poway, 
Calif.-based Gateway will of- 
fer PCs built around the new 
chassis design to consumers 


in September and to corporate | 


users in mid-October under 
an E-6300 Series name. Pric- 
ing is expected to be less than 
current ATX models, which 
range from $889 to $1,269. 
Using the BTX design is one 
in a series of changes that 
Gateway is making to reach 


metric technology “a bit in 
the past, somewhat casually,” 
said David Rymal, the compa- 
ny’s director of technology. 
Providence was looking at 
biometric products primarily 
as an alternative to the tokens 
it uses for two-factor authen- 
tication for remote users, Ry- 
mal said. But “the largest bar- 
rier to us has been interoper- 
ability, especially since our 
users are faced with multiple 
applications, and we haven't 
made much progress with sin- 
gle sign-on,” he explained. 
Midvale, Utah-based Burton 
Group’s assessment comes at a 


Total biometric 

industry revenues 
SOURCE: INTERNATIONAL 
BIOMETRIC GROUP. 2004 


$1.88 


$1.2B 


| but they have have been insti- 


pline,” Kay said. “They’ve 
| done most of the trashing and 


| based products early, and he 
predicted that users will make 
| the conversion rapidly, espe- 





| VISIT), the Transport Work- 


| the Burton Group’s report. 


| technologies in the private 
| only about one-third of the 


| lion in revenue in 2003 came 





| out to business users after 
| closing all 180 of its retail 


stores in March, said Roger 
Kay, an analyst at market re- 
search firm IDC. 

“The company imploded 
when they closed the stores, 


tuting a lot of financial disci- 
burning and can rise again.” 


Kay said it’s “bold” of Gate- 
way to go to market with BTX- 


cially with Intel promoting the 
new chassis design. 

In addition to its PCs, Gate- 
way is now offering a range of 
other products designed to en- 
tice corporate IT managers, 
from servers to switches and 
wireless access points. For ex- 
ample, Gateway announced 
last week that it plans to offer 


time when adoption of bio- 
metric technologies has been 
increasing in the public sector, 
thanks to programs such as 
the United States Visitor and 
Immigrant Status Indicator 
Technology (known as US- 


ers Identity Card and similar 
initiatives. 

“There was a big bump in 
interest in these technologies 
after the terrorist attacks,” 
said Gerry Gable, author of 


But so far, that interest has 
failed to generate even half the 
predicted uptake of these 


sector, experts said. In fact, 
biometric industry’s $719 mil- 


from the private sector, ac- 
cording to the International 
Biometric Group (IBG) in 
New York. 

The upfront cost of buying 
and integrating the needed 
hardware, software and mid- 
dleware has been one major 
reason for the slow adoption in 





the private sector, Gable said. 


GATEWAY’S BTX-BASED PCS will 
feature larger but quieter front 
fans to help with cooling. 


Intel’s new Xeon processor 
| with 64-bit support in its dual- 


CPU servers. “The rounded 
line will help them,” Kay said. 
David Kirkland, IT director 
at MasterCraft Boat Co. in 
Vonore, Tenn., said he al- 
ready has several of Gate- 
way’s E-Series desktop PCs 
and plans to find out more 
about the upcoming BTX- 
based products. MasterCraft 
annually replaces about 50 


According to analysts, per- 
user costs can easily exceed 
$200 on just the hardware and 
middleware technologies, de- 
pending on the technology. 

“While there are security 
concerns in the private sector, 
the funding is not there yet” 
for biometric products, said 
Donald Fisch, an analyst at 
IBG. “It will take proven suc- 


| cess of the technologies be- 


fore private-sector businesses 


deploy.” 


More work also needs to be 


| done in terms of interoperabil- | 


ity with existing enterprise 


| user authentication technolo- 
| gies, analysts said. 


Holding Off 

The University of Wiscon- 
sin-Madison has done some 
“limited piloting” of biometric 
devices, but there are no im- 
mediate plans to implement 


| them, said Kim Milford, infor- 
| mation security manager at 


the university’s department of 
information technology. Some 
of the challenges were inter- 
operability, cost and high er- 
ror rates. “In addition, there’s 


PCs and might consider the 
new systems, he said. 

The company has also 
bought laptops and servers 
from Gateway, as well as two 
plasma displays. “It helps that 


| they provide a range of de- 
| vices,” Kirkland said, adding 


that Gateway also “blows 
away” competitors on price by 
as much as 10% to 15%. 

This summer, Winona State 
University in Winona, Minn., 
is rolling out about 4,000 


| Gateway laptops for students 


and faculty as part of a seven- 
year contract valued at $40 
million, said Joe Whetstone, 
the school’s vice president of 
IT. Gateway won the contract 


| over other vendors primarily 


because it seemed to be the 
most willing to adapt to the 
school’s needs. “They don’t 
say, ‘This is what we've got, 
take it or leave it,” Whetstone 


said. @ 48655 


, the human challenge [in] help- 


ing users to understand the 
technology and to overcome 
their concerns about privacy,” 
she said. “Biometric evalua- 
tion still seems to be too intru- 


| sive to many people.” 


“Because of the hype after 


| 9/11, people’s expectations of 


the technology far exceeded 
the reality,” said Maxine Most, 
president of Acuity Market 
Intelligence in Boulder, Colo. 
“Biometrics got pulled into 
the public eye prematurely.” 

In the long term, though, 
the stronger identity assur- 
ance and user convenience en- 
abled by biometric technolo- 
gies will drive increased en- 
terprise use, said Tarvinder 
Sembhi, director of product 
management at Iridian Tech- 
nologies Inc., a vendor of iris 
recognition technologies in 
Moorestown, N_J. 

“We are seeing some early 


adopters that have deployed 


iris recognition to ensure that 


only the right people have the 


right access” to protected 


| health information, Sembhi 


said. @ 48663 
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Net Party lime 


HIRTY-FIVE YEARS. It seems like about a century, 
doesn’t it? But it was 35 years ago this month that the 
Arpanet — the initial piece of today’s Internet — began 
to go live. Sure, that’s a fuzzy way of saying it. But it 
took a while. On Aug. 30, 1969, the first Arpanet node 
was set up at the University of California, Los Angeles. The second 
node wasn’t ready at the Stanford Research Institute until Oct. 1. 
And the first attempt to log on across the Arpanet didn’t happen un- 
til Oct. 29. (For the record, it crashed the network.) 
Go ahead — party from now until Halloween. The Net is worth it. 


1969 was a great year for technology. Ken 
Thompson at AT&T’s Bell Labs wrote the first 
version of Unix that year. Ted Codd defined the 
relational database. Three IBM researchers — 
Charles Goldfarb, Edward Mosher and Ray- 
mond Lorie — lent their initials to GML, the an- 
cestor of today’s HTML and XML. And Xerox’s 
Gary Starkweather combined photocopier tech- 
nology with laser imaging to create the first 
laser printer. 

They all changed the face of IT — and the 
way IT is used in business. But none has had as 
dramatic an impact as the Arpanet. 

The rest changed how we do what we do. 
The Net changed the paradigm. 

Wait, stop, don’t leave! That’s not just the 
usual buzzspeak. The Arpanet’s impact really is 
qualitatively different from those of the other 
technologies. 

Unix, relational databases, markup languages 
and laser printers proved their value by replac- 
ing existing operating systems, databases, text- 
coding schemes and printers. They let us do the 
same things as before, only better. 

But the Arpanet — and the Internet — 
changed the way we think. 

With the Net, IT went from being 
about number crunching and data 
processing to being about commu- 
nications — between machines and 
between people. 

After 35 years, the network isn’t 
just the computer, as Sun Microsys- 
tems used to say. With Web ser- 
vices, the network is the applica- 
tion. With network-attached stor- 
age, it’s the disk drive. With voice 
over IP, it’s the telephone. 

Add the Web, and the network is 
the radio and the TV. It’s the confer- 


| 
| 
| 


ence room and the office. It’s the retail store 
and the research library. 

It’s not just how we do IT. Increasingly, it’s 
how the world does business. 

The dark side? Sure, it’s there. With the Net, 
physical collocation is no longer required, and 
physical security is no longer enough. And off- 
shoring of information jobs becomes possible. 
And criminals halfway around the world attack- 
ing our systems became inevitable. And on the 
Web, every design flaw in our systems is ex- 
posed to customers, with no sales clerks or cus- 
tomer service agents to cover for us. 

But the Net also lets our companies do busi- 
ness with customers they would never have 
approached before. It opens up new ways of 
cutting costs and adding value. It has dragged 
IT out of the back office and the glass house 
and made it indispensable to every step in the 
business process — from supply chains, logis- 
tics and manufacturing to sales, cross-market- 
ing and customer care. 

After 35 years, the Net really has brought us a 
long way. But not quite far enough. 

After all, we still don’t quite get it. Sure, we 

buy things on eBay and search with 
Google. We check our e-mail and 
load our iPods over the Internet. 
But we still talk about writing ap- 
plication code instead of wiring to- 
gether Web services. We think in 
terms of data centers instead of 
network-attached everything. 

Don’t worry — we'll master it. 
Old habits of thinking are just 
tough to break. 

But until we do, we’ll have to 
celebrate the Arpanet’s birthday 
the old-fashioned way. 

And party like it’s 1969. @ 48489 








says IT pilot fish. What 


changed overnight? 
ces toustaaiontnigueiintan 


fish groans. “So they nailed it to the concrete floor.” 


Unplugged 
Dust isn’t the 
only problem for 
this U.S. Army 
communica- 


tions unit in the desert. 
“One day, out of the 
blue, a senior officer 
who has no relationship» =: 
to the operation walks 
into the tent and an- 
nounces that there are 
too many electrical 
cords strewn about - 
and starts disconnecting 
them,” says a pilot fish 
on duty. “Eight hours 
and four hard drives lat- 
er, the systems are up 
and running again. And 
the senior NCO who is 
also the sysadmin is fi- 
nally calm enough to get 
his weapon back.” 


Not Exactly 

User tells help desk pilot : 
fish that when she re- 
boots the server, it says : 
that it “can’t find some 
drives.” “It took several i 
minutes of coaxing, 
coaching and cajoling to 
get her to read exactly 


SHARK 
TANK. 


‘It looks fine. 
“ask the user 
; why he thought it need- 
: ed anew cartridge,” 
: says fish. “He replied, * 
: got a request to resend 
: a fax because part of it 
: was blank. So | assumed 
: our machine was out of 
: ink” 


; At this pilot fish’s com- 
new high-end machines, 
: and their old PCs go to 
: ably new PC was sched- 
: uled to be upgraded, but 
: the old and barely ade- 
; Quate box of the guy 
next to me, who did the 
_ same programming | did, 
; Was not,” fish says. Why 
_ grade his PC because it 
| wasn't sufficient for the 
- needs of anyone else in 
: the company either.” 


what the message really : 


said,” fish grumbles. 


“And it tumed out tobe: 


about missing drivers, 


not drives. Seid the user, 


‘Drives, drivers - same 
difference!’ ” 


Ergo Error 
call that this remote of- 


: [serene 


fice needs an ink-jet car- : admin telis fish. “That 


tridge for its outgoing 
fax machine, When he 


| warning light has been 
: on for three weeks.” 
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Consider the dots connected. The end-to-end voice over IP solution we designed 
for Crate and Barrel features a unified IP messaging platform and the most advanced 
hardware available. The new system will save them a bundle on maintenance, management 
and wiring, while easing the cost and complexity of adding features or employees. And 
it's already improving productivity, helping over 400 associates make millions of customers 
feel right at home. To find out more, go to sbc.com/dots. GOING BEYOND THE CALL’ 





The information is there, 
but can you find if? 


Today one of the great challenges facing IT is the 


ability to manage staggering amounts of information. 


Which is why we created HP StorageWorks Reference 
information Storage System {RISS), o powerful new — 
solution capable of organizing, archiving and securely 
storing information so it con be found and retrieved 
quickly. HP RISS reduces the cost and complexity of — 
your network and ensures when you have all your 
information at your fingertips, ee comes easy. 
www.hp.com/info/storageworks_ilm 


Solutions for the adaptive enterprise. 
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